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Mathematics is the queen of the Sciences and 
Number Theory is the queen of Mathematics. 
— Gauss 


God invented the integers; all else is the work of man. 
— Kronecker 


I know numbers are beautiful. 
If they aren’t beautiful, nothing is. 
— Erdés 
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Notations 


X —aset; X = {x1,...,2n} —a finite set; |X| =n — the number 
n of elements in the finite set X = {71,..., Zn}. 


N = {1, 2,3, ...} — the set of positive integers (or natural numbers). 


Z = {...,—3, —2,—-1,0,1,2,3,...} — the set of integers. 

Q — the set of rational numbers. 

R — the set of real numbers. 

C={at+b-i:a,b€R,i? = —1} — the set of complex numbers. 
b|a — a non-zero integer b divides an integer a: a = bc, where 
ceZ,. 

gcd(a1,...,4n) — greatest common divisor of integers aj, ...,@n, at 


least one of which is non-equal to 0, i.e., the greatest integer, 
dividing aj,...,@n. If ged(a1,...,@,) = 1, the numbers ay,...,a,, are 
called relatively prime, or coprime; if gcd(a;,a;) = 1 for any dis- 
tinct i,7 € {1,...,n}, the numbers aj,...,a, are called pairwise 
relatively prime. 


Iem(aj,..-,;@n) — least common multiple of non-zero integers 
G1, ..-,@n, 1.e., the least positive integer divided by ay,..., dn. 


rest(a,b) — the remainder of an integer a after its integer division 
by a positive integer b: a = b-q+rest(a,b), where q, rest(a, b) € Z, 
and 0 < rest(a,b) < 6. 
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P = {2,3,5,7,11,13,17,19,...} — the set of prime numbers, i.e., 
the positive integers, having exactly two positive integer divisors; 
Dy Qs P15 P25 +005 Dies 08s U1 G25 05 Jgy» —- prime numbers. 

n= pt -..-pe*, pi < +++ <p EP, a4,...,0% € N — the prime 
factorization of a positive integer n > 1, i.e., its representation as 
a product of positive integer powers of different prime numbers 
P15 +++9 Pk 

S = {4,6,8,9, 10, 12,14, 15,16, 18, ...} — the set of composite num- 
bers, i.e., the positive integers, having more than two positive inte- 
ger divisors. 


1 = (CsCs-1.--C1C0)g = Cg + Cs-1g® +++: +eig+e0, 9 € N\{I}, 
0<«aG<g-1,c, #4 0— representation of a positive integer n in 
base g. 


|x|, 2 € R — floor function: the largest integer less than or equal 
to x. 


{x}, z € R — fractional value of z: {x} =x — |z]. 


[x], « € R — ceiling function: the smallest integer greater than 
or equal to x. 


o(n), n € N — Euler’s totient function: the number of positive 
integers that are relatively prime to n: ¢(n) = |{t EN: a < 
Acedia = iN. 

A(n), n € N — Carmichael function: for prime p > 3 and positive 
integer a, A(p*) = (p%); for positive integer a > 3, A(2%) 
2°-2, while \(2) = 1, and \(4) = 2; moreover, \(pft...pe*) = 

Ak 

lem(A(pt*), ---» A(D,*))- 

p(n), n € N — Mobius function: p(1) = 1, w(n) = (-1)*, if 
n= p,-...: pp is a product of & distinct primes, and p(n) = 0, if 


n has repeated prime factors. 


aa) = See 1, « € R,x > 0 — prime counting function: the 
number of primes less than or equal to a given non-negative real 
number 2. 
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e7(n) = Vani, n € N — tau function (or number of divisors’ 
function): the number of positive integer divisors of a positive 
integer n. 

eo(n) = Vand n € N — sigma function (or sum of divi- 


sors’ function): the sum of positive integer divisors of a positive 
integer n. 


© on(n) = Vain d*,n€N,k € C — divisor function: the sum of the 
k-th powers of positive integer divisors of a positive integer n. In 
particular, o9(n) = 7(n), and o1(n) = o(n). 


e v(n) — the number of distinct prime divisors of a positive 
integer n. 


e a= (mod n) — an integer a is congruent to an integer b modulo 
n, nN EN, ie., n|(a— bd). 


e [an = an = {2 € Z: & = a(mod n)} = {...,a — 2n,a — n,a, 
a+n,a+ 2n,a + 3n,...} — residue class (of a) modulo n: the 
set of all integers, congruent to a modulo n. Any representative rg 
of [a], is called residue of a modulo n. The smallest non-negative 
representative of [a], is called smallest non-negative residue of a 
modulo n; it is the remainder rest(a,n) of a after its integer divi- 
sion by n. The smallest in absolute value representative of [a], is 
called minimal residue of a modulo n. 


: (2/24, 45+); where Z[nZ = {[0]n, [1}n, [2}n, nee [n _ In} — the 
factor ring (or quotient ring) modulo n; for a prime number p, the 
ring (Z/pZ,+,-) is a (finite) field. 


e (Z/nZ*,-), where Z/nZ* = {[1]n, [2]n,..., [2 — In} — the multi- 
plicative group of the factor ring (Z/nZ,+,°-). 

e G) — Legendre symbol: () = 1, if an integer a, relatively prime 
to an odd prime number p, is a quadratic residue modulo p (ie., 
the congruence x? = a(mod p) has a solution 29 € Z), Je +1 
if an integer a, relatively prime to an odd prime number p, is a 
quadratic nonresidue modulo p (i.e., the congruence x? = a(mod p) 


does not have a solution), and ($) = 0, if pla. 
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(5) = (A)™ -...- (GE) for odd positive integer n = Pui - De? — 
Jacobi symbol. When n is a prime, the Jacobi symbol (*) reduces 


to the Legendre symbol. 


ord, a — multiplicative order (or modulo order) of an integer a, 
relatively prime to n, modulo n: the smallest positive integer expo- 
nent y for which a¥ = 1(mod n). 


indg a — index (or discrete logarithm) of an integer a with respect 
to the base g modulo n, i.e., the only integer 6 € [0, d(n) — 1] for 
which a = g?(mod n). Here n € {2,4, p%, 2p%}, where p € P\{2}, 
a EN, g — primitive root modulo n (i.e., ord, g = ¢(n)), and a — 
an integer, relatively prime to n. 


(Gs Cis tos gee] = gee a — continued fraction: here 
ae ae 
L 


ao € Z, ay,...,an € N, and the last term ay, if it exists, is greater 
than 1. 


04 = [GgrGisnxa,| = at, k = 0,1,...,n,... — the convergants of 
the continued fraction |ao, a1, ...,@n, ---]- 


aj, a2 = a, + d, az = az +d = a, + 2d, wey On = An—-1 + d a 
a, + (n — 1)d, ..., where a;,d € R — arithmetic progression with 
difference d; ajt+::-+a,= n(ar tan) ; 


bi, by = by *q, b3 = bo “g> by . qe sey bn = Ogi “gS by . Go 2289 
where b;,qg € R\{0} — geometric progression with common ratio 
q by tess + bp = ME for g £1. 


f(x) = co Here + coe? +++ + ep2" + ...,|z] < 7 — generating 
function of the sequence Co, C1, C2, -++; ns + 


boCn+k + bien+k—1 +°°+ + Once = 0, bo, ..., bn € R, bo 4 0 — linear 
recurrent equation of n-th order for a sequence co, C1, C2, +. Cn—1; 


b b b b _ 
= —FoCn-1 — ae > BECO, Cat = —Foen TS BPEL, oy Cath = 


— Een tk-1 uo PCr, .. with the initial values co, C1, ...,Cn—1- 

A = ((aij)), 1 < i,j <n — square n x n matrix with real entries 
aj. The matrix A is called symmetric, if aj; = aj; for all i,7 € 
{1,2,...,n}. The matrix A is called identity matrix and denoted 
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by In, if aj = 1 and aj; = 0 for i #4 j. The matrix Ab = ((aji)) is 
called transpose of A. The matrix A~', such that A- A7! = Ih, is 
called inverse of A. 


det A or |A| — determinant of a given n x n matrix A = ((aj;)). 
For n = 2 it holds det A = aj,a22 — a21a42; for any n > 3 it holds 
det A = YY_i(- 1)!*Ja,;-det Ay;, where Aj; is the (n—1) x (n—1) 
matrix, obtaned by deletion the first row and the j-th column of A. 


e n! — factorial of a non-negative integer n: n! =1-2-....n,n EN; 
O! = 1. 


e nt — primorial of a positive integer n: the product of all primes, 
less than or equal to n. 


z4,2 €R,n€ N — falling factorial of e: c2=a-(x-1)-...-(a@—- 
n+1). 

x", 2 €R,n € N — raising factorial of x: c” = x-(x+1)- 
(c+n-—1). 


(") — binomial coefficients, C7” — the number of combinations, 


i.e., the ways to choose an unordered ube of m elements from a 
fixed set of n elements; = CG? = 0<m<n. They 


form the Pascal’s triangle 7 ie a 
(5) =1 
o)=1 G)=1 
6) =1 () =2 Q)=1 
(0) =1 G) =3 Q)=3 G)=1 
()=1 G=4 G)=6 G)=4 G=1 
(0) =1 G)=5 G)=10 (3) =10 G)=5 ()=1 

() =1 () =6 ()=15 G) =20 (7) =15 (5) =6 (@) =1 


— number triangle, the sides of which are formed by 1, and any 
inner entry is obtained by adding the two entries diagonally above. 


e f(x) = O(g(x)) — big O notation: for a complex valued function 
f and a real valued function g, g(x) > 0 for all large enough values 
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of x, there exists a positive real number C' and a real number 20 
such that |f(ax)| <C- g(x) for all x > zo. 


e f(x) =o0(g(x)) — small o notation: for a complex valued function 
f and a real valued function g, g(x) > 0 for all large enough values 
Of ay litig.5 66 —— = 0. 


e f(x) ~ g(x): for a complex valued function f and a real val- 
ued function g, g(x) > O for all large enough values of z, 
limy 5.0 48 =1 

e e = 2.718281828... — the Euler’s number: e = limp_+o0(1 + dyn. 

ey = 0.5772156649... — the Euler-Mascheroni constant: y = 
limy,—s00 (Soy i —logn). 

e logz = Inz = log, x — natural logarithm of a positive real number 


x: its logarithm to the base e. 


© Li(n) — logarithmic integral: Li(n) = J,’ SS. 


Preface 


Special numbers, amongst integers, are important part of Number 
Theory, general Mathematics and several applied areas (such as 
Cryptography). 

While the “names” of some of them (Fermat numbers, Mersenne 
numbers, Fibonacci numbers, Catalan numbers, Bernoulli numbers, 
Stirling numbers etc.) are known to every mathematician, actual 
information on them is often scattered in the special literature. There 
are only a few books, which systematically present their history and 
properties, while giving main proofs. 

Moreover, if such books exist (see, for example, {Bond93], 
[CoGu96], [Hogg69], [Line86], [LiNi96], [KLS01], [Madd05], [SIP195], 
[Uspe76], [Voro61]), many new results appeared during several 
decades after their publication; so, this material should be updated 
and reworked. 

We should also mention several classical monographs on Number 
theory ([Apos86], [Dick05], [HaWr79], [MSC96], [Ribe89], [Ribe96], 
[Sier64], etc.). Those are basic books of fundamental importance. 
But they treat Number Theory as a whole and special numbers got 
only a small place there. 

Our first book on special numbers, the monograph “Figurate num- 
bers” [DeDe12], decides all such problems for polygonal numbers and 
their different generalizations, giving full retrospective of the history 
of most known class of special integers. 


xV 


xvi Mersenne Numbers and Fermat Numbers 


In the presented Series “Selected chapters of Number Theory: 
Special numbers” we are going to consider, by similar structure, 
the history and properties of several other famous classes of spe- 
cial numbers. The offered books of the Series are: “Mersenne and 
Fermat numbers”; “Perfect and amicable numbers”; “Stirling num- 
bers”, “Catalan numbers”; “Bernoulli numbers”; “Euler numbers”. 

So, the main purpose of the Series is to give a complete presenta- 
tion of the theory of several classes of classical special numbers, con- 
sidering much of their properties, facts and theorems with full proofs. 

In particular, we expect: 


e to find and to organize much of scattered material; 


present updated material with all details, in clear and unified way; 


consider all ranges of well-known and hidden connections of a given 
set number with different mathematical problems; 


e draw up a system of multilevel tasks. 


Mersenne and Fermat numbers, as well as a majority of classes 
of special numbers, have long and rich history, connected with the 
names of many famous mathematicians. This history is mainly an 
important part of the history of prime numbers, since the interest in 
Mersenne and Fermat numbers is related, above all, to the questions 
of their primality. 

A Mersenne number is a positive integer of the form M, = 2”—1, 
neN. 

Mersenne numbers were considered by Euclid (I[V-th century BC) 
as an attempt to find all perfect numbers. The Euclid—Euler theorem 
states, that an even positive integer is a perfect number if and only 
if it can be represented as a product 2*—!(2* — 1), where 2* — 1 is 
a prime. In fact, it is a Mersenne prime, so, there exists an one-to- 
one relationship between even perfect numbers and Mersenne primes; 
each Mersenne prime generates one even perfect number, and vice 
versa. Finally the numbers of the form 2” — 1 were named after 
Marin Mersenne (1588-1648), a French monk and mathematician, 
who discussed them in his work “Cogita physico mathematics” (1644) 
and stated some conjectures about the number’s occurrence. 
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A Fermat number Fy, is a positive integer of the form F, = 2?" +1, 
neEeZ,n>=0. 

Fermat numbers were studied by the XVII-th century French 
lawyer and mathematician Pierre de Fermat (1607-1665), who con- 
jectured (1650) that these numbers would always give a prime for 
n = 0,1,2,.... In fact, the first five Fermat numbers are primes: 
fp = 3; Fy = 5, Fy = 17, Py = 25T,, Pa = Oh5aT. 

But in 1732 Leonhard Euler (1707-1783), a Swiss-Russian math- 
ematician, physicist, astronomer, geographer, logician and engineer, 


found that Fs is a composite number. So, Fermat’s conjecture that 
F, is always prime is clearly false. Moreover, beyond Fy, no further 
Fermat primes have been found. 

The discovery that established further interest in these numbers 
came in 1796 when Johann Car] Friedrich Gauss (1777-1855), a Ger- 
man mathematician and physicist, proved the constructibility of the 
regular 17-gon. The Gauss—Wantzel theorem states that a regular n- 
gon can be constructed with compass and straightedge if and only if 
n is the product of a power of 2 and any number of distinct Fermat 
primes (including none). 

Nowadays, the theory of Mersenne and Fermat numbers contains 
many interesting mathematical facts and theorems, as well as a lot 
of important applications. 

Mathematical part of this theory is closely connected with classi- 
cal Arithmetics and Number Theory. It contains many information 
about divisibility properties of Mersenne and Fermat numbers, their 
connections with other classes of special numbers, etc. 

Moreover, Mersenne and Fermat numbers are used in the con- 
struction of new large primes, and have numerous applications in con- 
temporary Cryptography. For these applications, one should study 
well-known deterministic and probabilistic primality tests, standard 
algorithms of integer factorization, the questions and open problems 
of Computational Complexity Theory. 

The book deals in detail with all these aspects. 

In Chapter 1 we consider some important questions of elementary 
Number Theory, which will be used later. In elementary Number 
Theory, integers are studied without use of techniques from other 
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mathematical fields. Questions of divisibility, use of the Euclidean 
algorithm to compute greatest common divisors, factorization of inte- 
gers into prime numbers, investigation of behaviour of prime numbers 
and congruences, properties and applications of continued fractions 
belong to this part of elementary Mathematics. Several important 
discoveries of this field are the Fermat’s little theorem, the Euler’s 
theorem, the Chinese remainder theorem and the law of quadratic 
reciprocity. The properties of multiplicative functions such as the 
Mobius function, Euler’s totient function, divisor function integer 
sequences and factorials all also fall into this area. In this Chapter 
of the book we collect: the basic facts of the Theory of divisibility of 
integers; main questions of modular Arithmetics; examples of impor- 
tant arithmetic functions; algorithms of solutions of congruences; a 
base of the Theory of quadratic residues (including properties of Leg- 
endre symbol and Jacobi symbol); definitions and properties of mul- 
tiplicative order, primitive roots and indexes (discrete logarithms) 
modulo n; some important elementary properties of continued frac- 
tions. We represent all needed definitions, give many examples, col- 
lect the main properties of considered mathematical objects without 
proofs, but with large list of possible references. 

As the main part of the theory of Mersenne and Fermat numbers 
focuses on the questions of their primality, in Chapter 2 we give the 
basic Theory of prime numbers, including the history of the question, 
elementary properties of primes, the well-known classical algorithms 
of primality testing, examples of formulas of primes, large collection 
of the famous and hidden connections of prime numbers with other 
classes of special numbers. In the end of this Chapter the full list of 
open problems of the Theory of prime numbers is represented. 

Chapter 3 contains a rich review of the mathematical Theory 
of Mersenne numbers, with all needed proofs and many examples. 
Starting with the history of the question, we consider elementary 
properties of Mersenne numbers, including the questions of their 
divisibility and features of their recurrent behaviour. As the main 
part of the Theory of Mersenne numbers is connected with problems 
of their possible primality, we consider the well-known properties of 
prime divisors of Mersenne numbers, as well as prove the algorithm 
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of Lucas-Lehmer primality test for Mersenne numbers. Moreover, we 
give the large collection of possible connections of Mersenne numbers 
with other classes of special numbers, including perfect numbers and 
elements of Pascal’s triangle. At last, we represent a rich list of open 
problems in Number Theory, connected with Mersenne numbers. 

In Chapter 4 we consider similarly main questions of the Theory 
of Fermat numbers. The structure of the Chapter 4 is the same, as 
the structure of the Chapter 3. Starting with the history of the ques- 
tion, we consider elementary properties of Fermat numbers, give the 
list of possible prime divisors of Fermat numbers, prove the Pépin’s 
primality test for Fermat numbers. After we give a large collection 
of the possible connections of Fermat numbers with other classes of 
special numbers, and present a rich list of open problems in Number 
Theory, connected with Fermat numbers. 

Chapter 5 contains some important questions, concerning to the 
classical and contemporary applications of Mersenne and Fermat 
numbers. First of all, we prove the Euclid—Euler theorem and give 
a detailed sketch of the classical proof of the Gauss—Wantzel the- 
orem. After we consider many practical questions and interesting 
facts, connected with the research of large prime numbers, first of 
all, Mersenne primes. At last, we collect the most important number- 
theoretical aspects of applications of Mersenne and Fermat numbers 
in Cryptography. 

In a small Chapter 6, we collected some remarkable individual 
numbers, related to the Theory of Mersenne and Fermat numbers, 
as well as to the general Theory of prime numbers. 

In Chapter 7, a huge Mini Dictionary lists all classes of special 
numbers mentioned in the text. 

The Chapter 7 “Exercises” contain a big exclusive collection of 
problems, connected with the Theory of Mersenne and Fermat num- 
bers, with full solutions or, at least, with short hints of proofs. 

The target audience of the book consists of university professors 
and students (especially graduate ones) interested in Number Theory, 
General Algebra, Cryptography and related fields, as well as school 
teachers and general audience of amateurs of Mathematics. 
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Specifically, Chapters 2, 3 and 4 are accessible to undergraduate 
students and general readers of Mathematics, while Chapters 5 is 
slightly more difficult; it is more involved and requires some (still 
basic) mathematical and computational culture. 

The book is so organized that it can be used as a source mate- 
rial for individual scientific work of university students and even, 
partially, of school students. In fact, the material of the book was 
already used for the preparation of bachelor’s and master’s theses of 
many students of Moscow State Pedagogical University. 


Chapter 1 


Preliminaries 


1.1 Divisibility of integers 
By positive integer (natural) numbers we mean the numbers 


1,2,3,..., by integers we mean the positive integers, the number 
zero, and the negative integers: ...,—3,—2,—1,0,1,2,3,... 


Division algorithm 


1.1.1. The division algorithm (or integer division algorithm) is a the- 
orem in Mathematics which precisely expresses the outcome of the 
usual process of division of integers. 


Theorem (division algorithm). For any a € Z and b €N, there 
exist unique integers q andr, such thata = bq+r, andO<r<0b. 
The number q is called the quotient, r is called the remainder 
and is denoted by rest(a,b), 6 is called the divisor, a is called the 
dividend. 
For example, —10 = 3- (—4) + 2; 22 =3-7+1; 100 = 20-5+0. 


Divisibility 


1.1.2. We say that an integer a is divisible by an integer b, b 4 0, 
and write bla, if there is an integer c such that 


a=b-e. 
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In this case b is called a divisor of a, and a is called a multiply of b. 

For example, 2|10, as 10 = 2-5; (—6)|42, as 42 = (—6) - (—7); but 
14 J 25, as there exists no integer c, such that 14 = 25-c. 

Divisors can be negative as well as positive, although often we 
restrict our attention to positive divisors. 

1 and —1 divide (are divisors of) every integer, every integer 
(except 0) is a divisor of itself, and every integer is a divisor of 0, 
except by convention 0 itself. 

Numbers divisible by 2 are called even; numbers not divisible by 
2 are called odd. 

A divisor of n that is not 1, —1, n or —n is known as a non-trivial 
divisor. 

For example, 6 is an even number, as it is divisible by 2; it has 


four trivial divisors +1, +6, and four non-trivial divisors +2, +3; 3 is 


an odd number, as it is not divisible by 2; it has only trivial divisors 


1, +3; 2 is an even number; it has only trivial divisors +1, +2; 1 is 


an odd number, as it is not divisible by 2; it has only trivial divisors 
+1. 
A positive divisor of n which is different from n is called a proper 


divisor (or aliquot part) of n. 
For example, 6 has three proper divisors: 1, 2, and 3. 


Properties of divisibility 
1. If alb and alc, then a|(b +c); in fact, a|(mb+ nc) for all integers 
m and n. 
2. If alb and dJc, then alc. 
3. If alb and bla, then a = b, or a= —. 


The proof of these properties and some additional information 
see, for example, in [Buch09], [DeKo13]. 


Prime and composite numbers 


1.1.3. Positive integers with non-trivial divisors are known as com- 
posite numbers, while prime numbers have no non-trivial divisors. 
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Formally, a positive integer p is called prime, if it has exactly two 
positive integer divisors (which are 1 and the prime number itself). 

For example, 2 is a prime number, as it has exactly two positive 
divisors, 1 and 2; 3 is a prime number, as it has exactly two positive 
divisors, 1 and 3. 

The first 30 prime numbers are 2, 3, 5, 7, 11, 138, 17, 19, 23, 29, 
31, 37, 41, 48, 47, 53, 59, 61, 67, 71, 73, 79, 83, 89, 97, 101, 103, 107, 
109, and 113 (see sequence A000040 in OEIS). 

The property of being a prime is called primality. 

A positive integer n is called composite, if it has more than two 
positive integer divisors. 

For example, 4 is a composite number, as it has three positive divi- 
sors, 1, 2, 4; 6 is a composite number, as it has four positive divisors, 
1, 2, 3, 6; 15 is a composite number, as it has four positive divisors, 
1, 3, 5, 15. 

The first 30 composite numbers are 4, 6, 8, 9, 10, 12, 14, 15, 16, 
18, 20, 21, 22, 24, 25, 26, 27, 28, 30 32, 33, 34, 35, 36, 38, 39, 40, 42, 
44, and 45 (see the sequence A002808 in the OEIS). 

The number 1 has exactly one positive divisor, 1 itself. It is the 
only positive integer, which is neither prime, nor composite. 

So, any positive integer is or prime number, or composite number, 
or is equal to 1. 

Any composite number n can be represented as n = a- b, where 
Ll<a<b<n. 

For example, 4 = 2-2;6=2-3;20=2-10=4-5. 

For any prime number, if p= a-b, then a,b € {+1, +p}. 

Any natural number n greater than one has a prime divisor; in 


fact, it is the smallest positive divisor of n, greater than 1. 

For example, 2/4; 3|15; 5|5. 

The fundamental theorem of Arithmetic (or unique factorization 
theorem) states that every positive integer larger than 1 can be written 
as a product of one or more primes in an unique way, i.e., unique 
except for the order. 

For example, 4 = 27: 5 = 5; 6 = 2-3; 600 = 2° «3 57. 

For additional information see, for example, [Buch09], [DeKo13], 
[Ribe89], [Sier64]. 
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Greastest common divisor and least 
common multiple 


1.1.4. Given integers aj,...,@,, not all equal to zero, the greatest 
common divisor gcd(a1,...,@n) of a1,...,@n is defined as the largest 
positive integer that divides all numbers aj,..., Gn. 


For example, the set of divisors of the number 4 is {+1, +2, +4}; 
the set of divisors of the number 6 is {+1,+2,+3,+6}; so, the 
set of common divisors of the numbers 4 and 6 is {+1,+2}, and 
gcd(4,6) = 2. 


Given non-zero integers a1,...,@n, the least common multiple 


lem(ay,...,@n) of a1,..., Gy is defined as the smallest positive integer 
that is a multiple of all numbers aj,...,@n. 


For example, the set of multiplies of the number 4 is {+4, +8, 
12,+16,+20,+24,...}; the set of multiplies of the number 6 is 
{+6, +12, +18, +24, +30, +36,...}; so, the set of common multiplies 
of the numbers 4 and 6 is {+12,+24,+36,...}, and Icem(4,6) = 12. 


Properties of gcd and Icm 


1. gcd(p® -...p2*, pit +... -pe*) =p? - 


Y= rmincioe. 2, t= 1,2,. zag ht. 
2. Lampe cD hope. . Di) = p? Paks per, where a;, 3; > 0, and 


oj = re tS Dye 


j) +... pp®, where a;, 8; > 0, and 


3. Every common divisor of a and 6 is a divisor of gcd(a, b). 


4. If gcd(a,b) = d, then there exist integers x and y, such that ax + 
by = d (Bézout’s identity). 


. If albe, and gcd(a,b) = d, then $|c. 
gcd(m-a,m-b) =m- gcd(a,b) for any m EN. 
. gcd(a + m- b,b) = ged(a, b) for any m € Z. 


. If m|a and m|b, where m € N, then gcd(+ ey 


m? 2)= 


CON an 


. gcd(a, b) -lem(a,b) = a- b for any positive integers a, b. 


Preliminaries 5 


It is useful to define gcd(0, 0) = 0 and lcm(0, 0) = 0 because then 
the set of natural numbers becomes a complete distributive lattice 
with gcd as meet and lcm as join operation. 

The greatest common divisor can more generally be defined for 
elements of an arbitrary commutative ring. 

For a proof of these properties and for some additional information 
see, for example, [Buch09], [DeKo13], [Kost82]. 


Euclidean Algorithm 


1.1.5. The Euclidean algorithm (also called Fuclid’s algorithm) is an 
algorithm to determine the greatest common divisor of two integers 
by repeatedly dividing the two numbers and the remainders in turns. 


Theorem (Euclidean Algorithm). For any integer a and any 
natural b which does not divide a, the greatest common divisor of 
a and b is equal to the last non-zero remainder r, in the following 
algorithm: 


a=ba +71, 
b=rig+ro, 
Ts—2 =Ts-19s Ts, 
Ts-1 =TsQs + 0, 
where ry >1r2 >--: > 75 > 0. 
For example, as 
1071 = 1029-1 + 42, 
1029 = 42-244 21, 
42 = 21-2+0, 
we obtain, that gcd(1071, 1029) = 21. 
The Euclidean algorithm is one of the oldest known algorithms, 
since it appeared in Euclid’s Elements around 300 BC. Euclid origi- 


nally formulated the problem geometrically, as the problem of find- 
ing a common “measure” for two line lengths, and his algorithm 
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proceeded by repeated subtraction of the shorter from the longer 
segment. 

However, the algorithm was probably not discovered by Euclid 
and it may have been known up to 200 years earlier. It was almost 
certainly known by Eudoxus of Cnidus (about 375 BC); Aristotle 
(about 330 BC) hinted at it in his Topics. 

This algorithm can be used in any context where division with 
remainder is possible. This includes rings of polynomials over a field 
as well as the ring of Gaussian integers, and in general all Euclidean 
domains. 

For a proof of the theorem and for some additional information 
see, for example, [Buch09], [DeKo13], [DeKo18], [Kost82], [Stral16]. 


Coprime numbers 


1.1.6. Two integers a and b are called coprime (or relatively prime) 
if their greatest common divisor is equal to 1, i.e., they have no 
common factors other than 1 and —1. 

For example, 6 and 35 are coprime, as gcd(6,35) = 1, but 6 and 
27 are not because gcd(6, 27) = 3. 

The number 1 is coprime to every integer; 0 is coprime only to 1 
and —1. 


Properties of coprime numbers 


1. a and 6 are coprime if and only if there exist integers x and y, 
such that ax + by = 1. 

2. If blac, and gcd(b,c) = 1, then dla. 

3. If bla, cla, and gcd(b,c) = 1, then bcla. 


4. gcd(a,b) = 1 if and only if gcd(a",b™) = 1 for any non-negative 
integers m, n. 


For the first property, giving an criterion of coprime numbers, see 
Bézout’s identity. The second property can be viewed as a general- 
ization of Euclid’s lemma, which states that if p is a prime, and plbc, 
then either p|b, or plc. 
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In fact, we can easily check all properties of coprime numbers 
using the fundamental theorem of Arithmetics, as two coprime num- 
bers have no common prime divisors. 

For a proof of these properties and for some additional information 
see, for example, [Arno38], [BiBa70], [Buch09], [CoGu96], [DeKo13], 
[DeKo18], [Dick05], [Gelf98], [IrRo90], [Knut68], [Kost82], [Lege79], 
[Moze09], [Ore48], [Stral6], [Wiki20]. 


Exercises 


1. Prove, that any integer number can be represented as: 


(a) 6k, or 6k £1, or 64 + 2, or 64 +3, k € Z; 

(b) 7k, or 7k £1, or 7k £2, or 7K4+3,k € Z; 

(c) 10k, or 10k+1, or 10k+2, or 10k+3, or 10k+44, or 10k+5, 
ke; 

(d) 12k, of 12h2-1, or 12h2-2, of 1243, or 12k-+4, or 12h. 5, 
or 12k+6,k € Z. 


2. Prove, that a perfect square cannot be represented as: 
(a) 3k—1; (c) 5k +2; (e) 64 +2; 
(b) 4k —1; (d) 5h —2; (f) 6h -1. 


3. Prove, that a? + b? 4 c? for any odd integers a and b. 

4. Prove, that a? + b? 4 c? for any odd integers a and b. 

5. Prove, that for any integer a it holds: 

(a) a’! — 9a + 8 is divisible by 2; 

(b) a® + 3a? — 12 is divisible by 4; 

c) a? — 7a +18 is divisible by 6; 
) a’ —a—56 is divisible by 7; 
) 


a°® — 17a? + 24 is divisible by 8; 


( 
( 


Q 


(e 
(f) a’ +. 17a — 18 is divisible by 9. 
6. Prove that n-(n?+1)-(n?+4) is divisible by 5 for any integer n. 
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7. Prove that 5?"+1 . gr+2 4 3nt2.. 92n+1 is divisible by 19 for any 
n> 0. 
8. Find greatest common divisor of 11111111 and 111...... 111. 
—S—S—S 
100 unities 


9. For any positive integer n find greatest common divisor of: 


(a) n?+ 11n and 6; (c) n° + 4n and 10; 
(b) (n?—1):n?-(n?+1) and = (d) n® —5n4* + 4n and 10. 
60; 


10. Prove, that for any positive integer n it holds: 


(a) n° — n is divisible by 60; (c) 10” + 5 is divisible by 15; 
(b) n7 — n3 is divisible by 120; (d) 7°” — 1 is divisible by 18. 


1.2 Modular arithmetics 


Congruence relation 


1.2.1. Modular Arithmetic (sometimes called modulo Arithmetic) is 
a system of Arithmetic for integers, where numbers “wrap around” 
after they reach a certain value — the modulus. Modular Arithmetic 
was introduced by C.F. Gauss in his book Disquisitiones Arithmeti- 
cae, published in 1801. 

Two integers a and 6 are called congruent modulo n,n €N, if a 
and b have the same remainder when divided by n, or, equivalently, 
if n|(a — b). In this case, it is expressed as 


a = b(mod n). 
For example, 6 = 22(mod 4), as 4|(22 — 6); 2 = —7(mod 3), as 
3|(2 — (—7)); but 5 $ 12(mod 6), as 6 f (5 — 12). 
Properties of congruence relation 
1. a=a(mod n) (reflexivity); 


2. if a= b(mod n), then b = a(mod n) (symmetry); 
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3. if a= b(mod n), and b = c(mod n), then a = c(mod n) (transitiv- 
ity); 

4. If a= b(mod n), then f(a) = f(b)(mod n), where f(x) = ama" + 
Am—1x™ 1 +-+++a,x2+a9 is a polynomial with integer coefficients 
Am;,-+-+,41, a0. 

5. a = b(mod n) if and only if k-a = k-b(mod k-n) for any positive 
integer k. 

6. a = b(mod n) if and only if k-a =k-b(mod n) for any integer k, 
such that gcd(k,n) = 1. 

,k, if and only if a = b(mod M), where 


ee 
M Seni tts. 7%): 


Easy to see (properties 1, 2, 3), that the congruence relation = 
modulo n is an equivalence relation on the set Z of integers. 

The proof of these properties and some additional information 
see, for example, in [Buch09], [DeKo13], [Gaus01]. 


Congruence classes 
1.2.2. The set 


lal, = {x € Z: 2 =a(mod n)} 


= {...,a—3n,a—2n,a—n,a,a+n,at+ 2n,at+ 3n,...} 


of all integers congruent to a given number a modulo n is called the 
congruence class (or residue class) of a modulo n. 

The smallest non-negative representative of [a], is called smallest 
non-negative residue of a modulo n; it is the remainder rest(a, 7) 
of a after its integer division by n. The smallest in absolute value 
representative of [a], is called minimal residue of a modulo n. 

For example, 


[2)5 = {x € Z: x = 2(mod 5)} 
=f ..,.0 3.5 9-9.5,9=5 9 925 99.5 949.5.) 
=i te oe ee 
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The smallest non-negative residue of the class [2]5;, as well as its 
minimal residue, is 2. On the other hand, 


(19|5 = {x € Z: x2 =19(mod 5)} = {..., -6, -1, 4,9, 14, 19, 24,...}. 


The smallest non-negative residue of the class [19]; is 4, while its 
minimal residue is —1. 


Properties of residue classes modulo n 
1. [aly = {a+mt:t< Z}. 
2. [ajn = [b]n if and only if a = b(mod n). 
3. There are exactly n residue classes modulo n. 
A. If x € [a]n, then gcd(x,n) = gcd(a,n). 
5. A residue class [a], modulo n gives k residue classes [a]gn, 


[at nen, [a+ 2n]en,--, [@+(k —1)n]zn modulo kn, k EN. 
One can define an addition and multiplication on the set 
2/02 =O: Wes 2lngesxs lte— Ula} 
of all equivalence classes modulo n by the following rules: 
[ajn + [bln = [a+ 2]n, and [a]n- [bln = [a- b)n- 


On this way, Z/nZ becomes a commutative ring (Z/nZ,+,-) with n 
elements. For a prime number p, the ring (Z/pZ,+,-) forms a field. 

The proof of all these facts and some additional information see, 
for example, in [Arno38], [Buch09], [CoGu96], [DeKo13], [DeKo18}, 
[Dick05], [Gaus01], [Gelf98], [Kost82], [Lege79], [Moze09], [Ore48], 
[Wiki20]. 


Exercises 

1. Is the congruence 10! = 7!(mod 1000) true? 

2. Is the congruence (?) = @) (mod 5710) true? 
3. Find rest(f(86), 11), if f(z) = 1523 — 332? + 7. 
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4. Find the smallest 4-digital positive integer, congruent to 23 mod- 
ulo 101; modulo 100; modulo 99. 
5. Prove that 92°+1 + 8"+2 = 0(mod 73) for any n > 0. 
6. For which n it holds: 


(a) 51-52-...- 300 = 0(mod 11”); 
(b) 51- 52+... -300 = 0(mod 15”); 
(c) 31-32-...-400 = 0(mod 7”); 

(d) 31-32-... 400 = 0(mod 33")? 


7. Check, that: 


8. Find the result of the calculation: 
(a) [2]12 - [912 + 2 [5]12; 
(b) 3+ [4]ia- [4]1a — 7+ [945 
(c) 34. [4Ja7 + [2]a7 +5 ([4]iz)?; 
(d) 2- ([5]o3)° — [18]o3 — 69 - [5Jo3 + [3]as. 


1.3 Arithmetic functions 


A complex-valued function f(n) is called arithmetic function, if the 
value f(n) is determined for any positive integer n. 


Examples of arithmetic functions 
1.3.1. There are many examples of arithmetic functions, among 


them: 


e floor function |x|, i.e., the greatest integer, less than or equal a 
given real number 7; 
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e Mobius function (n), defined as follows: p(1) = 1, u(pi-...-pe) = 
(—1)* for a square-free number n = p,-... + pp, and p(n) = 0, 
otherwise; 


e divisor function o,(n) = Dodie d*, where d runs through all positive 
divisors of a positive integer n; in particular, for k = 0 we obtain 
the number of divisors’ function r(n) = ) qi, 1, while for k = 1 we 
obtain the sum of divisors’ function o(n) = dian 4- 


e Euler’s totient function o(n) = |{t EN: a2 <n, gced(x,n) = 1}; 


1 


e prime counting function n(x) = Vo ,<, 1. 


Multiplicative functions 


1.3.2. An arithmetic function f is called multiplicative, if f(1) = 1, 
and 


f(m-n) = f(m)- f(r) 


for any coprime positive integers n and m. 

An multiplicative function f is called completely multiplicative, if 
the condition f(m-n) = f(m)- f(n) holds for any positive integers 
m and n. 

For example, the function f(n) = n® is completely multiplicative 
for any real number a. The divisor function, the Mobius function, the 
Euler’s toient function are multiplicative, but not completely multi- 
plicative. The prime counting function 7(x) is not a multiplicative 
function. 


Properties of multiplicative functions 


1. The product of two multiplicative functions is a multiplicative 
function. 


2. If f is a multiplicative function, then, for a given n = p{'-...-py", 
one has 


k 
S> f(a) = [ [+ fms) + fe?) +--+ + FDP"). 
d\n 


i=1 
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3. If f is a multiplicative function, then h(n) = >/q, f(d) is a mul- 
tiplicative function. 


The proof of these properties and some additional information see, 
for example, in [Buch09], [DeKo13], [Chan70], [Ingh32], [Step01]. 


Euler’s totient function 


1.3.3. Given a positive integer n, the Euler’s totient function $(n) 
is defined as the number of positive integers less than or equal to n 
and coprime to n: 


a(n) =e eNie < n,9ed(e,n) = 1}. 


For example, ¢(8) = 4, since exactly four numbers, 1, 3, 5 and 7, less 
than or equal to 8, are coprime to 8. 

The function ¢ is usually called the Euler’s totient (or Euler 
totient) after L. Euler, who studied it. The totient function is also 
called Euler’s phi function or simply phi function, since the letter ¢ 
is so commonly used for it. 


Properties of Euler’s totient function 


1. ¢(p) = p—1 for any prime p. 
2. ¢(p%) = p* — p*! for any prime p and any positive integer a. 
3. The Euler’s totient function is multiplicative, ie., d(m-n) = 


o(m) - d(n) for any coprime positive integers m and n. 


1. Op Dye) = OT =p NG SP) ae) 
for any primes py < po < --: < ps and any positive integers 
Oly, Q,..., Mg. 


5. Vain O(4) =n, where the sum extends over all positive divisors d 
of n (Gauss’s identity). 


The Euler’s totient function is important mainly because it gives the 
size of the multiplicative group of integers modulo n. More precisely, 
@(n) is the order of the group of units of the ring (Z/nZ,+4,-). 


14. Mersenne Numbers and Fermat Numbers 


The proof of properties of the Euler’s totient function and some 
additional information see, for example, in [Buch09], [DeKo13]. 


Fermat’s little theorem and Euler’s 
theorem 


1.3.4. Now we consider two important theorems: the Fermat’s little 
theorem, and its generalization, the Euler’s theorem. 


Theorem (Fermat’s little theorem). Jf p is a prime number, 
then, for any integer a, 


P 


a? = a(mod p). 


It means, that if you start with a number, initialized to 1, and repeat- 
edly multiply, for a total of p multiplications, p € P, that number by 
a, a € Z, and then subtract a from the resulting number, the final 
result will be divisible by p. 

A variant of this theorem is stated in the following form: if p is 
a prime, and a is an integer coprime to p, then 


a?~! = 1(mod p). 


In other words, if p is a prime number and a is any integer that does 
not have p as a factor, then a raised to the (p—1)-th power will leave 
a remainder of 1 when divided by p. 

Fermat’s little theorem is the basis for the Fermat primality test 
(see Chapter 2, section 2.3). 


1.3.5. The Euler’s theorem (also known as the Fermat-Euler theo- 
rem or Euler’s totient theorem) is a generalization of Fermat’s little 
theorem. L. Euler published a proof of this theorem in 1736. 


Theorem (Euler’s theorem). [fn is a positive integer, and a is 
an integer coprime to n, then 


a?) = 1(mod n). 


Here ¢(n) is the Euler’s totient function. 
The Euler’s theorem may be used to easily reduce large powers 
modulo n. 


Preliminaries 15 


1.3.6. The Euler’s theorem is further generalized by the Carmichael’s 
theorem. 


Theorem (Carmichael’s theorem). [fn is a positive integer, and 
a is an integer coprime to n, then 


aX") = 1(mod n). 
Here A(n) is the Carmichael function, defined recursively: 
e for prime p > 3 and positive integer a, A(p*) = o(p%); 
e for positive integer a > 3, A(2%) = 2°", while \(2) = 1, and 
A(4) = 2; 
e at last, A(p{!-...- pe) = Iem(A(p"), ..-, A(pe*))- 
The proofs of these theorems and some additional information see, 


for example, in [Buch09], [DeKo13], [DeKo18], [Dick05], [IrRo90], 
[Lege79], [Moze09], [Ore48], [Sier64], [Step01], [Stral6], [Wiki20]. 


Exercises 

1. Prove, that n! = pf -...-pp*, where p; are all primes less than or 
equal to n, and a; = [5-| 4 LZ! La ae 

2. Find: 


(a) p(o(14)); (b) (r(20)!); (c) w(6(15)); (a) (294). 


3. Find the sum: 


a Had) e d)3"(). n\ d 

(a) ey Be ) Ee (5) aay’ 
c 3 2(d) > acy 
(6) Duar; yd (i) (9) (1 
(d) 2H (G) (-7)"; 
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4. Prove that: 
(a) CU) 2) eee) = [ae ia eee 
(b) o(1) +o(2)+---+o(n) =1-|#)+2-[$)+---4+n- [8]. 
5. Prove that o(p{! - pS? -...-p%) = pM! - p$2-t ....-p%1(p, —1)- 
(pz —1)-...- (ps — 1). 
6. Prove the Gauss identity ))q),, $(d) =n. 
7. Find all integers x such that: ¢(2) = 2; d(x) = 4; d(x) = 6; 
o(z) = 11. 


8. Find the remainder of the division: 


(ayo by 7: fd) 15"? by ii: (a) 3°° by 28: 
(b) 2416 by 7; (e) 310 by 16; (h) 317° by 28. 
(cy 5 by Lh (f) 37°" by 16: 


9. Is it true that for f(x) = 292018! — 1217185 +. 252917? —171¢)4! — 
1332° + 3 it holds: 


(a) f(24) = —2(mod 13); (c) f(—55) = —4(mod 13); 
(b) f(—24) = 2(mod 11); (d) f(55) = 4(mod 11)? 


1.4 Solution of congruences 


1.4.1. Let f(x) = anx™ +--- +a ,2 + a9 be an polynomial with 
integer coefficients, and a, # 0(mod n). If, for some x € Z, f(xo) = 
O(mod n), then for any y = xo(mod n) one has also that f(y) = 
O(mod n), and we say, that the residue class [o]n, i.e., the class 
x = xo(mod n), is a solution of the congruence f(x) = O(mod n), 
which is called a congruence of order m modulo n. 


Linear congruences 


1.4.2. The linear congruence theorem states that the linear congru- 
ence ax + b = 0(mod n) has exactly one solution, if gcd(a,n) = 1, 
exactly d solutions, if gcd(a,n) = d, d\n, and no solutions, otherwise. 
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Theorem (linear congruence theorem). 


e If gcd(a,n) = 1, the linear congruence ax + b = O(mod n) has 
exactly one solution x = xo(mod n); 

e if gcd(a,n) = d, d\n, the linear congruence ax + b = 0(mod n) 
has exactly d solutions x = 29 + k- 4(modn), k = 0,...,d—1, 
where x = xo(mod *%) is the only solution of the linear congruence 
Sa +5 =0(mod 5); 

e if gcd(a,n) = d, dj n, the linear congruence ax + b = 0(mod n) 
has no solutions. 


The only solution x = x9(mod n) of a linear congruence az +b = 
O(mod n), gcd(a,n) = 1, can be found: 


e by consideration of all representatives 0,...,n —1 of the residue 
classes modulo n; 


e by the formula zg = —b- a®(™—-!(mod n); 


e by consideration of congruences to = —btEn (mod i), &. = 
0,1,...,a—1, ete. 


For example, a linear congruence 
lla — 5 = 0(mod 7) 


has the only solution (a residue class modulo 7), as gcd(11,7) = 1. 
It is equivalent to the congruence 4% = —2(mod 7). 

Checking the numbers 0,1,2,...,6, we obtain that 4-3 = 
—2(mod 7), i.e., the only solution of the congruence 4% = —2(mod 7) 
is the residue class x = 3(mod 7). 

On the other hand, using the formula 


4x = —2 + Tk(mod 7) 
for k = 0,1,2..., we obtain 
4x = —2(mod 7), 4x = 5(mod 7), 4x = 12(mod 7). 


Dividing two sides of the last congruence by 4, we obtain, that « = 
3(mod 7). 
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At last, using the Euler’s totient function and the fact, that 
4¢(7)-1 — 45, we get the following congruence: 
a = —2-4°(mod 7). 
As 


4° = (—3)° = 9: (—27) = 2-1 =2(mod 7), 


we get, that 1 = —2-2 = —4 = 3(mod 7). 
The proof of this theorem and some additional information see, 
for example, in [Buch09], [DeKo13]. 


Chinese remainder theorem 


1.4.3. The Chinese remainder theorem states that the system of lin- 
ear congruences with pairwise coprime modules n; has exactly one 
solution, a residue class modulo N = Icm(nj,...,Ng) = 1°... Ng. 


Theorem (Chinese remainder theorem). The system of linear 
congruences 


x = (mod n,) 


x = ce(mod nz) 


with pairwise coprime modules n1,...,np has exactly one solution, 
i.e., a residue class modulo 


NY = (GH das Wig) = aS ce? Ts 


which has the form 


| 2 


N 
LS — C1 yi eae 7 Ck YE (mod N), 
k 


n1 
where y; is a solution of the linear congruence vy = 1(mod nj). 
For example, consider a system of linear congruences 
x = 4 (mod 5) 
x = 1 (mod 12) 
x = 0 (mod 7). 
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It is easy to see, that 
lem(5, 12,7) = lem(5, 2? - 3,7) = 2? -3-5-7 = 420. 


As x = 1(mod 12), we get « = 12¢+1, wheret € Z. 

Using the representation « = 12t+ 1 in the congruence 7 = 
O(mod 7), we get a new congruence 12¢ + 1 = 0(mod 7) with argu- 
ment t. Easy to see, that —2t = —1(mod 7), or —2t = 6(mod 7), 
or t = —3(mod 7). So, t = Tt; — 3, where t) € Z, ie, x = 
12(7t; — 3) + 1 = 84t, — 35, ty € Z. 

Using the representation x = 84t; — 35 in the congruence 7 = 
4(mod 5), we get 84t; — 35 = 4(mod 5) with argument t;. Easy to 
see, that 4t; = 4(mod 5), or t; = 1(mod 5). So, t; = 5t2 +1, te € Z, 
ie., © = 84(5t2 + 1) — 35 = 420t2 + 49, to € Z. 

We obtain, that the only solution of our system is the residue 
class x = 49(mod 420). 

The original form of the theorem, contained in a [I-rd-century 
book Sun-tzu Suan-ching of a Chinese mathematician Sun Tzu and 
later (1247) republished by Qin Jiushao, is a statement about simul- 
taneous congruences; the general form of the Chinese remainder the- 
orem can be formulated for rings and (two-sided) ideals. 

The proof of the theorem and some additional information see, 
for example, in [Buch09], [DeKo13], [Dick05], [Kost82], [Ore48}. 


Congruences of order ™m 


1.4.4. Here we consider a general algorithm of a solution of any 
congruence of order m, m > 1, composite modulo n. 
I. Given a prime p, the congruence 


f(x) = 0(mod p) 


of order m modulo p is equivalent to some congruence x* +--+ + 
bx + bo = 0(mod p) of order s < p—1 modulo n, and has at most s 
solutions. 

One can find them by consideration of all representatives 0,..., 
p — 1 of the residue classes modulo p. 
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II. Given a prime p and a positive integer @ > 1, consider the 
congruence 


f(x) = 0(mod p*) 


of order m modulo p®. We can use the following algorithm for finding 
all solutions of this congruence: 


e Consider the congruence f(x) = 0(mod p), find all its solutions; let 
x = x1(mod p) be one of these solutions, i.e., f(x) = 0(mod p), 
and «= 41 + pty, t) € Z. 


e Consider the linear congruence Hes) + f'(21)t; = 0(mod p), find 
all its solutions; let t; = t/(mod p) be one of these solutions, i-e., 
t; = t' + pte, and = 294+ pte. 

e Consider the linear congruence fd + f'(x2)tz = 0(mod p), find 
all its solutions; let t2 = t’ (mod p) be one of these solutions, i.e., 
to =t" + pts, and x = 13 + p°ts. 

e Consider the linear congruence ——— Za-1) 4 fl (Za—-1)ta—-1 = 0(mod p), 
find all its solutions; let te-1 = =a ned p) be one of these solu- 


tions, ie., te-1 =t + pte, and «# = tq + pta. 


Therefore, x = x,(mod p“) is one of the solutions of the congru- 
ence above, and all its solutions can be found on this way. 

ITI. At last, for a given composite number n = pf -...- pp*, all 
the solutions of the congruence 


f(x) = 0(mod n) 


of order m modulo n can be found using the following property: 
f(x) = 0(mod n) if and only if 


f(x) = O(mod p™) 


f(z) = O(mod p;*). 


1.4.5. For example, consider a congruence 


2° — o* + 6x? + 15a + 45 = 0(mod 675). 
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Let f(x) = 2° —2* +62? +152 +45. As 675 = 33.57, we have a 
congruence 


f(x) = 0(mod 3° - 5”). 

It is equivalent to the system 
f(z) = O0(mod 33) 
ee 0(mod 52). 


A. Consider the congruence f(x) = 0(mod 3). 
In fact, start with the congruence f(z) = 0(mod 3). Obviously, it 


is equivalent to the congruence x° — «* = 0(mod 3). 

It is easy to see, that x = 0(mod 3) gives a solution of this con- 
gruence. 

If x 4 0(mod 3), then (x,3) = 1, and x? = 1(mod 3). For such 
x we get the congruence x—1 = O(mod 3), ie., a solution x = 
1(mod 3). 


Therefore, we get all (two) solutions of the congruence f(x) = 
O(mod 3): the classes x = O(mod 3), and x = 1(mod 3). 

Al. Consider x = 0(mod 3) — one of the solutions of the congru- 
ence f(x) = 0(mod 3). Obviously, f(0) = 0(mod 3), and x = 3t, +0, 
where ft; € Z. 

Consider the congruence f(a) = 0(mod 37), where x = 3t,; + 0, 
ty € Z. Let © + (0) - ty = O(mod 3). In fact, f(0) = 45. As 
f'(z) = dat — 43 + 122 + 15, then f’(0) = 15. So, we get the 
congruence - +15-t, = 0(mod 3), or the congruence 15 + 15-t; = 
O(mod 3). As 15 = 0(mod 3), we get three solutions: tj = 0(mod 3), 
t, = 1(mod 3), and t; = —1(mod 3). 

In the first case, t] = 3tg, where tg € Z, and x = 34; +0 = 
3(3t2) + 0 = 3?-t2 +0. In the second case, t; = 3t2 + 1, where 
to € Z, and x = 3ty +0 = 3(3t2 +1) +0 = 3?-t2 +3. In the last case, 
ty = 3t2—1, where te € Z, and x = 3t, +0 = 3(3t2—1)+0 = 3?-te—3. 

A.1.1. Let f(x) = 0(mod 33), where x = 37t2 + 0, tg € Z. Con- 
sider the congruence / + f'(0) - t2 = 0(mod 3). As f(0) = 45 and 
f’(0) = 15, then we have the congruence 2 +15-t. = 0(mod 3), or 
the congruence 5 + 15 - t2 = 0(mod 3), which has no solutions. 

A.1.2. Let f(x) = 0(mod 33), where x = 37t2 + 3, tg € Z. Con- 
sider the congruence 1) + f'(3),t2 = 0(mod 3). As f(3) = 306 and 
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f’(3) = 348, we have the congruence — + 348 - tg = 0(mod 3), o 
the congruence 34 + 348 - t2 = 0(mod 3), which has no solutions. 

A.1.3. Let f(x) = 0(mod 3), where x = 3%t2 — 3, to € Z. Con- 
sider the congruence LC®) + f'(—3) -t2 = 0(mod 3). As f(—3) = 270, 
and f’(—3) = 492, we have the congruence =< _ +492 -t. = 0(mod 3), 
or the congruence 30+ 492-tz = 0(mod 3), wee has three solutions: 
t2 = 0(mod 3), tg = 1(mod 3), and tg = —1(mod 3). 

In the first case, tg = 3t3, where t3 € Z, and z = 37t2 -3 = 
3?(3t3) — 3 = 3° - t3 — 3. 

In the second case, tg = 3t3 +1, where t3 € Z, and x = 3°tg -3 = 
37(3t3 + 1) —3 = 3° - t3 +6. 

In the third case, tg = 3t3 — 1, where tz € Z, and x = 37t2 —-3 = 
37(3t3 — 1) —3 = 3? - ts — 12. 

So, we have all solutions of the congruence f(x) = 0(mod3°), 
for which « = 0(mod 3): they are the classes x = —3(mod 3°), x = 
—6(mod 33), and x = —12(mod 3°). 

A2. Consider x = 1(mod 3) — the other solution of the congru- 
ence f(x) = 0(mod 3). Obviously, f(1) = 0(mod 3), and x = 3t, +1, 
where t; € Z. 

Let f(x) = 0(mod 37), where x = 3t; + 1, t; € Z. Consider the 
congruence AD) 4. + f’(1)-t, = 0(mod 3). As f(1) = 66, and f’(1) = 
28, we get hic congruence oe + 28-t, = 0(mod 3), or the congruence 
22 + 28-t; = O(mod 3). As 22 = 1(mod 3), and 28 = 1(mod 3), 
we have, that 1 +t, = 0(mod 3), and therefore t; = —1(mod 3). So, 
ty = 3tg—1, where tg € Z, and x = 3t14+1 = 3(3t2-1)+1 = Sta 2 

Let f(x) = 0(mod 3°), where x = 37t2 — 2, tg € Z. Consider the 
congruence ih? + f'(—2) - tz = 0(mod 3). As f(—2) = —9, and 
f'(—2) = 103, we have the congruence — + 103-t2 = 0(mod 3), or 
the congruence —1 + 103-t2 = O(mod 3). As 103 = 1(mod 3), we 
get that —1 + t2 = 0(mod 3), and therefore tz = 1(mod 3). So, tg = 
3t3 +1, where ts € Z, and x = 3°t) — 2 = 37(3t3 +1) —2 = 3° -tg +7. 

Therefore, one of the solution of the congruence f(x) = 0(mod 3°) 
is a class x = 7(mod 3°). 

So, we got all solution of the congruence f(x) = 0(mod 3°): the 
classes x = —3(mod 3°), x = —6(mod 3°), x = —12(mod 33), and 
x = —7(mod 3°). 
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B. Find all solutions of the congruence f(x) = 0(mod 52). 

For the first step, consider the congruence f(x) = 0(mod 5), ie., 
the congruence «° — x* + 2? = 0(mod 5). 

Easy to see, that x = 0(mod 5) is a solution of this congruence. 

If £4 0(mod 5), then (x,5) = 1, and 2* = 1(mod 5). For such x 
we get the congruence 2? + 2 — 1 = 0(mod 5), which has the only 
solution x = 2(mod 5). 

So, the congruence f(x) = O(mod 5) has exactly two solutions: 
x = 0(mod 5), and x = 2(mod 5). 

B1. Consider x = 0(mod 5) — one of the solutions of the congru- 
ence f(x) = 0(mod 5). Obviously, f(0) = 0(mod 5), and x = 5t, +0, 
where ft, € Z. 

Let f(x) = 0(mod 57), where x = 5t; +0, t1 € Z. Consider the 
congruence i) + f’(0)-t; = O(mod 5). As f(0) = 45, and f’(0) = 
15, we get the congruence _ +15-t, =0(mod 5), or the congruence 
9+ 15-t, = 0(mod 5), which has no solutions. 

B2. Consider x = 2(mod 5) — the other solution of the congru- 
ence f(x) = 0(mod 5). Obviously, f(2) = 0(mod 5), and x = 5t, +2, 
where t; € Z. 

Let f(x) = O(mod 5%), where x = 5t; + 2, t; € Z. Consider 
the congruence £@) + f'(2) +t, = O(mod 5). As f(2) = 115, and 
f'(2) = 87, we have the congruence 4° + 87 - t; = 0(mod 5), or the 
congruence 23+ 87-t; = 0(mod 5). Therefore, we get t; = 1(mod 5). 
So, t) = 5t2 + 1, where t, € Z, and x = 5t) + 2 = 5(5t2 +1) +2= 
5? tg +7. 

Therefore, we have proven, that the only solution of the congru- 
ence f(z) = 0(mod 5?) is the class « = 7(mod 57). 

C. Consider now the system of congruences 

a a(mod 5?) 
z = (mod 33) ’ 
where a = 7, and b € {—3,6, 15, 7}. 

If = a(mod 25), then x = 25t + a, where t € Z. In this case we 
have 25t + a = b(mod 27), and hence, —2¢ = b — a(mod 27), —26t = 
13(b — a)(mod 27), t = 13(b — a)(mod 27). So, t = 27t; + 13(b — a), 
where t, € Z, and x = 25t +a = 25(27t; + 13(b — a)) +a = 675ty + 
325b — 324a, where t, € Z. 
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We have proved, that all solutions of the congruence 
a” — x + 62? = 15x + 45 = 0(mod 675) 
are given by the following residue classes modulo 675: 
x = 325b — 324a(mod 675), where a=7, and be {—3,6,15, 7}. 


So, we get four solutions: 2 = 7(mod 675), x = 132(mod 675), x = 
357(mod 675), and x = 582(mod 675). 

The full explanation of the algorithm above and many exam- 
ples you can see in [Buch09], [DeKo13]. Some additional information 
see, for example, in [Arno38], [BiBa70], [Dick05], [Gaus01], [IrRo90], 
[Lege79], [Moze09], [Ore48], [Stral6], [Wiki20]. 


Exercises 


1. Solve the congruence: 


(a) 3x = 1(mod 7); (f) 78a = 102(mod 273); 
(b) 1002 = 21(mod 23); (g) 315a = —10(mod 275); 
(c) 42x = 33(mod 90); (h) 762 = 232(mod 220); 
(d) 20x” = 12(mod 48); (i) 45a = 75(mod 100). 
(e) 202 — 50 = 0(mod 35) 


2. Solve ths system of congruences: 


x = 1(mod 5) 5x + 7 = 0(mod 12) _ 
(a) « & = 2(mod 6) ; (©) i = 7(mod 8) 
Somer 4x = 3(mod 7) 
3x = 7(mod 10) (d) ¢ 5a =4(mod 11) ; 
(b) 4 2x = 5(mod 15) ; 11a = 8(mod 13) 
7x = 5(mod 12) 
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18x = 226(mod 10) _ 3x = 5(mod 2) 
(©) 302 = 232(mod 24)’ = (h) ¢ x = —3(mod 5) ; 


4c =7 d 9 
3x = 1(mod 10) ry 


(f) < 42 = 3(mod 5) ; (i) 202 = —10(mod 15) 
2x = 7(mod 9) 22 = —12(mod 10) © 


5a = 1(mod 12) 
(g) 4 5a = 2(mod 8) ; 
7x = 3(mod 11) 


. Solve the congruence: 


) 2 +27 — 22 +1=0(mod 5); 
) 13325 — 1482* + 852? — 98a? + « + 6 = 0(mod 7); 
) 2320484 + 85247? — 1249202 — 2209 + 78 = 0(mod 11); 
d) 292018! -121¢139 4959912? 171412! -1332°7+5 = O(mod 13); 
) 357242? — 81144 — 12725"! + 45 = O(mod 7); 
) 8830593 — 106a4% + 590741 + 872743 + 84 = 0(mod 5); 
) 401521089? + 6059999 + 36521002 + 888q100! _ 24 = 0(mod 11). 


. Solve the congruence: 


(a) 312* + 57x23 + 96a + 191 = 0(mod 675); 
(b) 32% — 82° + 82? — 34 +3 = 0(mod 225); 
34 6x2 + 7 = 0(mod 675); 

+ 2a? + 22 +4 = 0(mod 675); 


Cc 


8 


) 
) 
(c) 
(d) 
) 
) 


&, 


(e) 23 — a2? +2+3 =0(mod 108); 
(f) 2° + 5a? + 92 + 9 = 0(mod 108). 
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1.5 Quadratic residues, Legendre 
symbol and Jacobi symbol 


Given an odd prime p, an integer a coprime to p is called a quadratic 
residue modulo p, if 


x = a(mod p) 


for some integer xg. Otherwise, a is called quadratic nonresidue. 


Legendre symbol 


1.5.1. For any integer a coprime to an odd prime p, the Legendre 
symbol (named after Adrien-Marie Legendre) (4) is defined by ($) = 
1, if a is a quadratic residue modulo p, and by ) =-l,ifaisa 
quadratic nonresidue modulo p. If pla, one has (4) = 0. 


Properties of Legendre symbol 
La) = a= (mod p) (Euler’s criterion). 


2. If a = b(mod p), then (2) = (2). 


= 
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1(mod 4), and Ss) = -l, 


6. (2) = (-1)*, ie, (2) = 1 if p = 41(mod 8), and (2) = -1 if 
p= +3(mod 8). 


7. For distinct odd primes p and q, 


ie., (£) = (2), if p = 1(mod 4) or g = 1(mod 4), and (7) = 
=); if p = —1(mod 4) and q = —1(mod 4) (law of quadratic 


reciprocity). 
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For example, 


CP) (2) (#8) -@)-@) 


It means, that —125 is a quadratic residue modulo 47. 


Jacobi symbol 


1.5.2. The Jacobi symbol is a generalization of the Legendre symbol. 
(Another generalization is the Kronecker symbol. Additionally, the 
Legendre symbol is a Dirichlet character.) 

Introduced by C.G.J. Jacobi in 1837, it is of theoretical interest in 
modular Arithmetic and other branches of Number Theory, but its 
main use is in Computational Number Theory, especially in primality 
testing and integer factorization. 

For any integer a and any positive odd integer n, the Jacobi symbol 
(<) is defined as the product of the Legendre symbols corresponding 


to the prime factors of n: for n = p{!-...- pz, it holds 
a1 Ak 
(2) = (=) = (=) 
n Pi Pk 
Like the Legendre symbol, if (¢) = —1, then a is a quadratic 


nonresidue modulo n. 
But, unlike the Legendre symbol, if (£) = 1, then a may or may 
not be a quadratic residue modulo n. 


Properties of Jacobi symbol 


— 
ia) 
a 
II 
> 


(mod n), then (2) = (4). 
glo. 
fa) aa 


a ) — 1; in particular, (=) = 1. 


PF we N bP 


=1) = (-1)"F, ie., (=!) = 1, ifn = 1(mod 4), and (=4) = -1, 
if n = —1(mod 4). 
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+1(mod 8), and (2) = —1, 


if n = +3(mod 8). 


. For distinct odd positive coprime integers n and m, 


pe 1 


ie., () = (+), if n = 1(mod 4) or m = 1(mod 4), and (*) = 


— (4), ifn = —1(mod 4) and m = —1(mod 4) (law of quadratic 
reciprocity). 


For example, 
(=s-) = Gs) = Ga) = Gas) = Gs) (as) 
=(-1)-(2) =n: ($)=Cy1=-1 


It means, that —122 is a quadratic nonresidue composite odd modulo 


45. 


The proofs of the properties of Legendre symbol and Jacobi sym- 


bol, as well as some additional information see, for example, in 
[Buch09], [Gaus01], [DeKo13], [IrRo90]. Historical aspects one can 
find in [Dick05], [Lege79], [Ore48], [Wiki20]. 


Exercises 
1. Check, that (=2) = 1. 
2. Find: 
() GF) ©) GPs) Gos @ «Gs 
(b) (Sx) (@) (Fors) (=a) (D) Ga) 
3. How many solutions has the congruence: 


(a) x? — 200 = 0(mod 79); (c) x? = 555(mod 101); 
(b) 2? = 56(mod 87); (d) 2? = 15(mod 209); 
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(e) 2? + 27 = 0(mod 91); (h) 2? = 500(mod 1777); 
(f) 2? = 304(mod 299); (i) 2 — 270 = (mod 2803). 
(g) x — 990 = 0(mod 1787); 


4. Find the number of solutions of the congruence: 


(a) 2x? + 72 +5 = 0(mod 37); 


(b) 3a? + 5a + 7 = 0(mod 87); 
(c) 2a? — 32 + 4 = 0(mod 151); 
(d) 322 —x+7 = 0(mod 151); 
(e) 5x? + 2x — 5 = 0(mod 71); 
(f) 42? — 22 + 9 = 0(mod 137); 
(g) 5a? + 3x2 + 25 = 0(mod 167); 


(h) 76x? — 77x + 36 = 0(mod 227). 


5. Find: 
(a) HEE): (@) (3B): (@) Rs) Bs Gm BB: 
(b) HY): (e) BA) GB) GB): ) GH: 
©) @: © 2); © EDs © GBM: © (®). 


6. Find all primes p, such that 3 is a quadratic nonresidue modulo 
D. 
7. Find all prime divisors of the quadratic forms 2y? + 10; 32? + 15. 


1.6 Multiplicative orders, 
primitive roots and indexes 


Multiplicative order 


1.6.1. Given a positive integer n and an integer a coprime to n, the 
multiplicative order ord, a of a modulo n is defined as the smallest 
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positive integer y with 
a’ = 1(mod n). 


For example, ords 4 = 2, as 42 = 1(mod 5), but 44 4 1(mod5). 

Similarly, ord;3 = 4, as 34 = 1(mod 5), and 3! # 1(mod5), 
3? Z 1(mod5), 3? 4 1(mod5). 

At last, ordg 2 = 6, as 2° = 1(mod9), and 2! 4 1(mod9), 2? # 
1(mod9), ..., 2° # 1(mod9). 


Properties of multiplicative order 


1. If a= b(mod n), then ord, a = ord, b. 

2. ord, a\d(n); in particular, 1 < ord, a < ¢(n). 

3. a® = 1(mod n) if and only if ord, a6. 

4. a® =a"(mod n) if and only if 6 = n(mod ord, a). 

5. The numbers a®,a!,a?,...,a°"*-! represent different residue 
classes modulo n. 

6. ord,1.. pas c= lem(ord,e1 a,...,0Td,es a). 


dm 
7 ordm(a") = Featnordm a)" 
& If ord, @ = °7y, then ordy;,a™ =. 
9. If ord. a = y, then Ord yk+1 @ E {y,7- p}; if ordyk a = a 
Or dyk+1 a=y-p, and p* > 2, then ordyk-+2 a=7- p. 


For full proofs and examples see [Buch09], [DeKo13]. 


Primitive roots modulo n 


1.6.2. If ord, g = $(n), g is called primitive root modulo n. In this 
case the numbers 


age 


give all representatives of residue classes modulo n, coprime to n. 
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For example, $(5) = 4. As ords 3 = 4, the number 3 is a primitive 
root modulo 5; as ords 4 = 2, the number 4 is not a primitive root 
modulo 5. 

Similarly, (9) = 6; as ordg2 = 6, the number 2 is a primitive 
root modulo 9; as ordy7 = 3 (7? = 1(mod9), but 7! 4 1(mod5), 
7? £1(mod9)), the number 7 is not a primitive root modulo 5. 

Primitive roots exist only for n = 2,4, p*%, 2p°, where p is any 
odd prime number, and a is any positive integer. 

For full proofs and examples see [Buch09], [DeKo13], [Vino03). 


Indexes 


1.6.3. If g is a primitive root modulo n, then, for any a coprime with 
n, we have a = g°(mod n), where 8 € [0,¢(n) — 1]. The number £ 
is called index (or discrete logarithm) of a modulo n with base g. In 
this case we write G = inda = ind, a. 

For example, the number 3 is a primitive root modulo 5; in 
this case, the index of the number 4 modulo 5 with base 3 is 2, 
as 4 = 37(mod5). Moreover, as 3° = 1(mod5), 3! = 3(mod5), 
32 = 4(mod5) and 3° = 2(mod5), we get ind1 = 0, ind2 = 3, 
ind3 = 1, and ind4 = 2. 


Properties of indexes 


. Ifa = b(mod n), then inda = indb(mod ¢(n)). 
. inda- b= inda+ indb(mod ¢(n)). 


. inda® = k-inda(mod ¢(n)) for any non-negative integer k. 


Ee WO NH Fe 


. ordn a= ea) : 
ged(inda,6(n)) 

Discrete logarithms are quickly computable in a few special cases. 
However, no efficient method is known for computing them in gen- 
eral. Several important algorithms in Public-key Cryptography base 
their security on the assumption that the discrete logarithm problem 
over carefully chosen groups has no efficient solution. 

The proofs of the properties of multiplicative orders, prim- 
itive roots and indexes, as well as some additional important 
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information see, for example, in [Arno38], [BiBa70], [Buch09], 
[DeKo13], [DeKo18], [Dick05], [Gaus01], [Gelf98], [IrRo90], [Knut68], 
[Kost82], [Lege79], [Moze09], [Ore48], [Stral6], [Vino03], [Wiki20]. 


Exercises 

1. Find: 
(a) ord35a24 17; (f) ordageos 125; (k) ord, 50 5°°; 
(b) ord334368 (—17); (g) ordes7e6s 81; (1) ordy2009 3; 
(c) ordgozs 8; (bh) ordz93056 125; — (m) ordgo0 343; 
(d) ordge4 625; (i) ordzoo00 81; (n) ordg3072 49; 
(e) ordaes75 64; (j) ordgoz25 16; (0) ordyg53 3°°"+?. 


(a) 12; (c) 50; (e) 98; (g) 250; (i) 625; 
(b) 14; (d) 81; (f) 242; (h) 338; ~— (j):1250. 


3. Find all residue classes: 
(a) [x]13, for which ordj3 xz = 4; (c) [aJ19, for which ordjg x = 3; 


(b) [x]17, for which ord,7 x = 8; (d) [x]a3, for which ord43 x = 6. 


4. Find all indexes 11 modulo 5; modulo 7; modulo 17. 


5. Find the length of the period of the representation #¢ = 
(Qis<2@igess)gg 1h 


(a) § = sydo0000 9 = 7 (c) $= 0m 9 =3; 
(b) $= ooo 9=4 (4) $=—4n. 9 =8 


6. Find rest(3732"", 11), using properties of indexes. 
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7. How many solutions has the congruence: 


(a) 2? = 1(mod 77); (g) 2° = 1(mod 143); 

(b) x!” = 1(mod 91); (h) x°° = 79(mod 97); 

(c) 2!” = 1(mod 143); (i) 218 = 1(mod 77); 

(d) 3212 = 31(mod 41); (j) 218 = 1(mod 91); 

(e) 2° = 1(mod 451); (k) 218 = (mod 143); 

(f) 2! = 1(mod 287); (1) «°° = 17(mod 97)? 
8. Find 


(a) ordyr.415.477; (A) ordgs.433.4143; (8) ordys.33.g3 (—7); 
(b) or dy7.133.99 11; (e) or dy97.133.53 VG (h) or dy3.32.83 49. 
(c) or dy6.73.34 3; (f) or dys .33.g9 125; 


1.7 Continued fractions 


1.7.1. A continued fraction |ao,...,@n,...] is defined as ag + 
1 


er as where ag is some integer, and all a,, n € N, are pos- 
= 


itive integers (the last number, if it exists, 4 1). 
The rational numbers 6, = [ao,..., ax] = a, k = 0,...,,.-., 
are called convergents of the continued fraction |ag,...,@n,...]. 


, and use for the numbers 


1.7.2. For example, consider a fraction 
173 and 281 the Euclidean algorithm: 


173 = 281-04 173; 281 = 173-1+4 108; 173 = 108 - 1+ 65; 
108 = 65-1+4 48; 65 = 43-14 22; 43 = 22-1+ 21; 


22 = 21-141; 21=1-21+0. 
Easy to see, that 


173 _ 5, 1 81_,, 1 
9g, Ut a Pog tte: 
281 mat? 778 ike 

65 1 43 1 22 : 

5 at on og 
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Therefore, 


= (00 dtd bl: 


The convergents of the continued fraction [0,1,1,1,1,1,1,21] are: 
- [0] = 0; 61 = [0,1] =0+ 5 =1; 6 D, 1,1] =045ce =04+5= 

53 63 = [0,1,1,1] = 3; t= = [0,1,4,1;4|) = 35 35= 16,1, 61,1,4] = 2: 
i — (0,1,1,1,1,1,1] = §; 67 = [0,1,1, L111, 21) = +2. 


For the decomposition of 1-3v5 we will use a generalization of the 


Euclidean algorithm. 
As 6 < V45 < 7, we obtain for 1-3v8 = i= 1-45 the following 


estimation: -3 < © 1=3v5 on Le., dg = [eB = —3. Then 
ag = Re avs = 342, where = L= 3 v5 _ (3) — Teav5. 
_ _ “3(743V5) _ 2(74+3V5) _ = 2(7+3v5) _ 
Therefore, a, = Za =e 
(7+3V5) 
a ae 
As 6.5 < ee < 7, we get aj = pisanesy = 6, and aj = 
T+3v6 ast a here a= Es hx ao 
_ = a(-5= 35) _ 2(-5-3V5) 
Therefore, ag = =e eee ee 


2(5+3V5) __ oe 
20 


As 11 < 7 < 1.2, then ag = ea = 1, and ag = 
5H3v5 — —1+2, where a 543V5 4 54 8V5 


az ‘10 
= 10(—5—35) — 10(—5—3/5) 
SET: ~ (=5+3V5)(—5-3V5) 25—45 — 


er, a3 = 
10(5+3V5) _ (5+3V/5) 
20 ia an 


As 5.5 < oes) < 6, then ag = [ee = 5, and-ag = 
Stav5 544, where A = S43v8 __5 = S435 

So, an = = L.e., @4 = a2. Therefore, a4 = “ead =1+2, where 
= = =543V5 In particular, a4 = ag, and = = 2, 1é., a5 = az. 
Similarly, a5 = a3, and = a = i.e., Ag = a4; on the same way, 
ag = a4, and ~ = = Le., a7 = Qs, etc. 
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So, we get the decomposition 


1-375 


= [@0, @1, 2, 43, 44,...] 


2 
= |—3,6,155;1,5,1,53.«.|=[—3,6,11,5)| 
The convergents of the continued fraction [—3,6,1,5,1,5,1,5,...] 
are: dg = [-3] = —3; 6. = [-3,6] = -34+ é = i. dg = 
[-3,6,1] = -3+ =! = -34+4 = —%, 63 = [-3,6,1,5]) = -42, 
J4 = [-3,6, 1,5, 1] = —4%, ete. 


1.7.3. Continued fractions are motivated by a desire to have a 
“mathematically pure” representation for the real numbers. 


Properties of continued fractions 


1. Ifd, = ae, then Po = ag, Py = ayag+1, and Py = an Py_-1+Pn—2 
for any n > 2. 


2; If Ok = a, then Qo = 1 Qi = a1, and Qn = AnQn—1 + Qn-2 for 
any n > 2. 


» Hon, O),) = 

»-1=Q0< Q1 < Qo<.... 

_ If Py >1, then P} > Py > P3>.... 
_3)\n4+1 

On 7 On=1 = os 

. 09 < 69 < +++ < 63 < 64. 


oN OD oO  w 


. Every finite continued fraction is rational, and every rational 
number can be represented in precisely one way as a finite con- 
tinued fraction. 


9. Every infinite continued fraction is irrational, and every irra- 
tional number can be represented in precisely one way as an 
infinite continued fraction. 
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10. 


Li: 
12. 
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A continued fraction is periodic if and only if it is the continued 
fraction representation of a quadratic irrational, that is, a real 


solution to a quadratic equation with integer coefficients. 


nPn— i ee 
lhGpes< yltggc se] = Soo where GQ, = [@n,...]. 
If a = [ao,...,@n,-...], then Ja —6,| < Onna in particular, for 


any n > 1, dy, is the best rational approximation for a. 


The proof of these properties and some additional information 
see, for example, in [Buch09], [Dave99], [DeKo13], [Khin97]. The his- 
tory of the question one can find in [Dick05], [Ore48]. Some number- 


theoretical applications are represented in [DeDe12]. 


Exercises 


1. 


Find the decomposition into a continuous fraction: 


() #2) Bi © wes @ BH: © - 3: ©) HBR. 


2306? 


. Find the decomposition into a continuous fraction: 


@) 3 @ 4; @ AS @) SP: 
(b) 54; © BES a) BES) A, 
(c) HES; () BBS; a) SR, 


. Find the decomposition into a continuous fraction: 


= 169+/63005 . 1170+2,/93637 
(a) Vv 2210-13, (b) oe (c) Se 


13 , 


. Find the rational number, represented as: 


(a) [1,2,3,4, 6]; (d) [—1, 2,3, 10]; (g) [1,2, 3,4, 6]; 
(b) [—2,111,2,1,3]; (e) [—2,1,3, 7]; (h) [0,8, 1,6, 2, 2]. 
(c) [—2,3, 3, 10]; (f) [—3,1, 3, 9, 5]; 
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5. Find the irrational number, represented as: 


(a) =[1,(2)]; (a) = [8, (16); (0) = [4, (2,8)); 
(b) =(2,(4)); = @) =[2,0,4)]; () [8, (10, 5)); 
(c) =[8, (6)]; G) =[2,(2,4)); (a) [3,(2,5)}; 
(d) =([4,(8)); = (k) = (3,06); (@) 3,(4,))); 
(e) =[5,(10)|; =) = [8, (2,6)]; (s) [5, (2, 10)); 
(f) = [6,(12)]; (m) =[3,(3,6)];  (t) [-3,6, 1, 5)] 
(g) =[7,04)); (@) = (4, (1,8); 
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Chapter 2 


Prime numbers 


2.1 History of the question 


2.1.1. The Theory of prime numbers forms an important part of 
classical Number Theory. But prime numbers are more than just 
mathematical oddities: they have become extremely important in 
applications, especially in Cryptography, because it is difficult to 
factor a large composite number into primes. In fact, for general 
numbers that are few hundred decimal digits long, factorization is 
nearly impossible; this gave rise to the RSA cryptosystem. 


2.1.2. The prime numbers have long and reach history. 

Already the Rhind Mathematical Papyrus, from around 1550 BC, 
has Egyptian fraction expansions of different forms for prime and 
composite numbers. 

However, the earliest surviving records of the explicit study of 
prime numbers come from ancient Greek Mathematics. 

The mathematicians of Pythagoras’s school (500 BC-300 BC) 
were interested in numbers for their mystical and numerological prop- 
erties. They understood the idea of primality and were interested in 
perfect and amicable numbers. 

By the time Euclid’s Elements appeared in about 300 BC, several 
important results about primes had been proved. 
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In Book IX of Elements, Euclid proved that there are infinitely 
many prime numbers. This is one of the first proofs known which 
uses the method of contradiction to establish a result. 

Euclid also gave a proof of the fundamental theorem of Arith- 
metic: every integer can be written as a product of primes in an 
essentially unique way. 

Moreover, Euclid showed that the number 2”~1!(2" — 1) is a per- 
fect number, if the number 2” — 1 is a prime. (Much later, in 1747, 
L. Euler was able to show that all even perfect numbers are of 
this form.) It is still not known whether there are any odd perfect 
number. 

In about 200 BC, Eratosthenes devised an algorithm for calculat- 
ing primes. This Greek invention, the sieve of Fratosthenes, is still 
used to construct lists of primes. 

There is then a long gap in the history of prime numbers during 
what is usually called the Dark Ages. 

Around 1000 AD, an Islamic mathematician Ibn al-Haytham 
(Alhazen) found Wilson’s theorem, characterizing the prime numbers 
as the numbers n that evenly divide (n—1)!+1. He also conjectured 
that all even perfect numbers come from Euclid’s construction using 
Mersenne primes, but was unable to prove it. 

Another Islamic mathematician, Ibn al-Banna’ al-Marrakushi, 
observed that the sieve of Eratosthenes can be sped up by testing 
only the divisors up to the square root of the largest number to be 
tested. 

Fibonacci brought the innovations from Islamic Mathematics back 
to Europe. His book Liber Abaci (1202) was the first to describe trial 
division for testing primality, again using divisors only up to the 
square root. 

The next important developments were made by French mathe- 
matician Pierre de Fermat at the beginning of the XVII-th century. 

He proved a speculation of A. Girard that every prime number 
of the form 4n +1 can be written in an unique way as the sum of 
two squares and was able to show how any number could be writ- 
ten as a sum of four squares. He devised a new method of factoris- 
ing large numbers which he demonstrated by factorising the number 
2027651281 = 44021 - 46061. 


Prime numbers 41 


He stated (without proof) the Fermat’s little theorem (later 
proved by G.V. Leibniz and L. Euler). The theorem states, that if p 
is a prime then for any integer a we have a? = a(mod p). 

This proves one half of what has been called the Chinese hypoth- 
esis which dates from about 2000 years earlier, that an integer n is 
prime if and only if the number 2” — 2 is divisible by n. The other 
half of this is false, since, for example, 2°4! — 2 is divisible by 341 
even though 341 = 31-11 is composite. 

Fermat’s little theorem is the basis for many other results in Num- 
ber Theory and is the basis for methods of checking whether numbers 
are prime which are still in use on today’s electronic computers. 

P. Fermat corresponded with other mathematicians of his day and 
in particular with the French monk Marin Mersenne. In one of his 
letters to M. Mersenne he conjectured that the numbers 2” + 1 were 
always prime ifn is a power of 2. He had verified this for n = 1,2,4,8 
and 16, and he knew that if m were not a power of 2, the result 
failed. 

Numbers of this form are called Fermat numbers and it was not 
until more than 100 years later that L. Euler showed that the next 
case 23? + 1 = 4294967297 is divisible by 641 and so is not prime. 

Number of the form 2” — 1 also attracted attention because it is 
easy to show that if unless n is prime these numbers must be compos- 
ite. These are often called Mersenne numbers because M. Mersenne 
studied them. 

Not all numbers of the form 2” — 1 with n prime are primes. For 
example, 2'! — 1 = 2047 = 23-89 is composite, though this was first 
noted as late as 1536. 

For many years numbers of this form provided the largest known 
primes. As of 2020, a total of 51 Mersenne primes have been found. 

Christian Goldbach formulated Goldbach’s conjecture, that every 
even number is the sum of two primes, in 1742, in a letter to L. Euler. 

L. Euler’s work had a great impact on Number Theory in general, 
and on Theory of prime numbers, in particular. 

L. Euler proved Alhazen’s conjecture (now the Euclid—Euler theo- 
rem) that all even perfect numbers can be constructed from Mersenne 
primes. 
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He extended Fermat’s little theorem and introduced the Euler’s 
totient function ¢(n). As was mentioned above, he factorised the 
5-th Fermat number 2°? + 1, he found 60 pairs of the amicable num- 
bers, and he stated (but was unable to prove) what became known 
as the law of quadratic reciprocity. 

He was the first to realise that the Number Theory could be stud- 
ied using the tools of Analysis and in so-doing founded the subject 
of Analytic Number Theory. 

He was able to show that not only the so-called Harmonic series 


a 1 is divergent, but the series 


de Gh, All 1 

ae waa sale aa 
formed by summing the reciprocals of the prime numbers, is also 
divergent. 

The sum to n terms of the Harmonic series grows roughly like 
log n, while the latter series diverges even more slowly like log log n. 
This means, for example, that summing the reciprocals of all the 
primes that have been listed, even by the most powerful computers, 
only gives a sum of about 4, but the series still diverges to oo. 

At first sight the primes seem to be distributed among the integers 
in rather a strange way. For example, in the 100 numbers immedi- 
ately before 10 000 000 there are 9 primes, while in the 100 numbers 
after there are only 2 primes. However, on a large scale, the way in 
which the primes are distributed is very regular. 

A.-M. Legendre and K.F. Gauss did extensive calculations of the 
density of primes. 


Both Legendre and Gauss came to the conclusion that for large 
1 

logn’ 

Legendre gave an estimate for the prime counting function 7(n) 


n the density of primes near n is about 


(the number of primes p < n) of the form n(n) = aa—Tossee> 


while Gauss’s estimate is in terms of the logarithmic integral: a(n) = 


So) dt. 
gt 
The statement that the number of primes up to x is asymptotic to 
ee ( 1 
log x log x 
number theorem. Attempts to prove it continued throughout the 


ie., that the density of primes is ) is known as the Prime 


XIX-th century with notable progress being made by P. Chebyshev 
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and B. Riemann. The result was eventually proved (using power- 
ful methods in Complex Analysis) by J. Hadamard and Ch.J. de la 
Vallée Poussin in 1896. There are still many open questions (some 
of them dating back hundreds of years) relating to prime numbers. 

Another important XIX-th century result was Dirichlet’s theo- 
rem on arithmetic progressions, which states, that certain arithmetic 
progressions contain infinitely many primes. 


2.1.3. Many mathematicians have worked on primality tests for 
numbers larger than those where trial division is practicably appli- 
cable. Methods that are restricted to specific number forms include 
Pépin’s test for Fermat numbers (1877), Proth’s theorem (1878), the 
Lucas—Lehmer primality test (1856), and the generalized Lucas pri- 
mality test. 

Since 1951 all the largest known primes have been found using 
these tests on computers. The search for ever larger primes has 
generated interest outside mathematical circles, through the Great 
Internet Mersenne Prime Search and other distributed computing 
projects. 


2.1.4. The idea that prime numbers had few applications outside of 
pure Mathematics was shattered in the 1970’s when the Public-key 
Cryptography and the RS'A cryptosystem were invented, using prime 
numbers as their basis. 

The increased practical importance of computerized primality 
testing and integer factorization led to the development of improved 
methods capable of handling large numbers of unrestricted form. 

For additional information see, for example, [Bras88], [Dick05], 
[Ore48], [Salo90], [Sier64], [Sing00], [Stru87]. 


2.2 Elementary properties of 
prime numbers 


Prime and composite numbers 


2.2.1. A positive integer number p which has exactly two natural 
divisors, is called a prime number, or simply a prime. 
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The set of prime numbers is denoted by P. So, 
P = {2,3,5,7, 11, 13, 17, 19, 23, 29,... }. 


A positive integer number n which has more than two natural divi- 
sors, is called a composite number. 
The set of composite numbers is denote by S. So, 


S = {4,6,8,9, 10, 12, 14, 15, 16, 18,... }. 


As the unity has exactly one positive integer divisor, i.e., is neither 
prime, nor composite, we obtain, that 


N=PUSUTIE 


Infiniteness of the set of prime numbers 


2.2.2. About two thousand years ago Euclid (circa 300 BC) showed 
that there are infinitely many prime numbers. 


Theorem (Euclid). There are infinitely many prime numbers. 
The Euclid’s proof is thus. 
Suppose that there are only finite number of primes, and 


P= {P1; D2; ++ Pk} 
are all the primes. Let 
= py * par? Pet 1 


and let p bea prime dividing FE. Then p cannot be any of pj, pa, ..., Dr, 
otherwise p would divide the difference FE — p,-p2-...- py = 1, which 
is impossible. So, this prime p is still another prime, and 71, po, ..., DE 


would not be all the primes. 
L. Euler gave an analytic proof of this theorem. 


In fact, if P = {p1,p2,...,p~e} are all the primes, consider the 


rational number 


f(y" 
x=][(1-+) . 
i=1 Pi 
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As the value (1— a is the sum 1+ + at: -- of infinite geometric 


progression 1, a om ..., we obtain that 
k —1 k 
1 1 1 
M(-=) -HG+s+a+) 
j=l Pi j=l Pi A 
= Yt - YF 
ay Ak * 
a;>0 P| Pr mi 


Bur yy + is the harmonic series, which is divergent, a contradic- 


tion. 
Euler had shown also, that 
e the sum rr, of the reciprocals of the primes is divergent. 
More exactly, there exists an asymptotic formula 


1 
a — = logz + o(log log x). 
psa 


The proof of this asymptotic formula and many additional infor- 
mation see, for example, in [Buch09], [DeKo13], [Ingh32], [Kara83], 
[Titc87]. 


Fundamental theorem of Arithmetics 


2.2.3. The fundamental theorem of Arithmetics shows that the set 
P of primes forms a multiplicative basis of the set of all positive 
integers. 


Theorem (Fundamental theorem of Arithmetics). Any natu- 
ral number n > 1 can be represented in one and only one way as a 
product of prime numbers: 


= Pye py tc DS DLS P, Di <= pe < +9 < py, OF EN. 


This representation is called the canonical form of factorization. 
For example, 60 = 2? - 3! - 51; 100 = 2? -5?;101 = 1011. 
The proof of this theorem and some additional information see, 
for example, in [Buch09], [DeKo13], [Dick05], [Sier64], [Ingh32]. 
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Exercises 

1. Prove, that any positive integer n > 1 has a prime divisor. 

2. Prove, that ifn € S, thenn=a-b,1<a<b<n. 

3. Prove, that any composite number n has a prime divisor 
psyn. 

4. Prove, that for any prime number p and for any integers a, 
b we have the following property: pla - 6 if and only if pla or 
pip. 

5. Prove, that pp, < 2?” for any positive integer n, where py, is the 
n-th prime number. 

6. Prove, that py < 22" forn>1. 

7. Prove, that, for a given n > 3, between n and n! there exists at 
least one prime number; using this fact, prove, that there exist 
infinitely many prime numbers. 

8. Prove, that if p is an odd prime, then it has the form 4k — 1, or 
the form 4k + 1. 

9. Prove, that if pis a prime, and p > 3, then it has the form 6k—1, 
or the form 6k + 1. 

10. Prove, that there exist infinitely many prime numbers of the form 
4k — 1. 

11. Prove, that there exist infinitely many prime numbers of the form 
6k — 1. 

12. Find all prime twins, i.e., pairs of primes (p,p+ 2), less then 100. 


2.3 How to recognize whether a 


natural number is a prime? 


The problem of distinguishing prime n from composite numbers is 


known to be one of the most important and useful in Arithmetic. 


— Gauss, 1801. 


Prime numbers 47 


Sieve of Eratosthenes 


2.3.1. An easy method of finding consecutive prime numbers was 
given by a Greek mathematician Eratosthenes (circa 276 BC — circa 
194 BC). 

Consider the sequence 


DSA F607 By ce teast 


Then, since 2 is the first prime number p;, we remove from this 
sequence all the numbers greater than p; and divisible by py, ie., 
starting with 2, each second number of the table. 

The first of the reminding numbers is 3 = po. Now we remove all 
the numbers greater than p2 and divisible by pg, i.e., starting with 
3, each third number of the table. 

The first of the reminding numbers is 5 = pz, and so on. 

Thus, we obtain p; = 2, po = 3, p3 = 5, pa = 7, ps = 11, ..., 
Pi000 = 7917, peoooo00 = 104395301, .... Here p, means the n-th 
prime number. 

Modern sieves include the Legendre sieve, Brun sieve, the Selberg 
sieve, and the Large sieve. One of the original purposes of the Sieve 
Theory was to try to prove conjectures in Number Theory such as the 
twin prime conjecture. While the original broad aims of Sieve Theory 
still are largely unachieved, there has been some partial successes, 
especially in combination with other number-theoretical tools. 

Some additional information see, for example, in [Buch09], 
([Hool76], [Moto83], [DeKo13], [Dick05], [Moto83], [Ore48]. 


Simplest primality tests 


2.3.2. A primality test is a test to determine whether or not a given 
positive integer n is prime, as opposed to actually decomposing the 
number into its constituent prime factors, which is known as prime 
(integer) factorization. 

The simplest primality test is as follows: 

® given an positive integer n, we see if any integer m from 2 to 
n—1 divides n; if n is divisible by any m, then n is composite, 
otherwise it 1s prime. 
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2.3.3. Rather than testing all m up to n — 1, we need only test m 


up to Jn: 


e ifn is composite, then it has a prime divisor p < \/n. 


In fact, if m is composite, there exists a non-trivial positive 


divisor a of n, i.e., n can be represented as 
n=a-:b1l<a<b<n. 


As a > 1, it has a prime divisor p, which is, obviously, a prime 
divisor of n. As p,a € N and pja, then p < a, and, hence, p < 3, i.e., 
p? <a-b. So, p? <n, and p< Vn. 

Therefore, we get the simplest practical primality test, called 


trial division, which is commonly used also for factorization of small 
integers: 

e given an positive integer n, we see if any prime p from 2 to 
Vn divides n; if n is divisible by any such p, then n is composite, 
otherwise it is prime. 


2.3.4. A good way to speed up these methods (and all the others 
mentioned below) is to pre-compute and store a list of all primes up 
to a certain bound (such a list can be computed with the sieve of 
Eratosthenes). Then, before testing n for primality with a serious 
method, one first checks whether n is divisible by any prime from 
the list. 

Primality tests come in two varieties: deterministic and proba- 
bilistic. 

Deterministic tests determine with absolute certainty whether a 
number is prime. Examples of deterministic tests include the Lucas 
test, the Lucas-Lehmer test, the Pépin’s test, the elliptic curve pri- 
mality proving, etc. 

Most popular primality tests are probabilistic tests. Examples of 
probabilistic test include the Fermat test, the Miller—Rabin test, the 
Solovay—Strassen test, etc. These tests use, apart from the tested 
number n, some other numbers a which are chosen at random from 
some sample space; the usual randomized primality tests never report 
a prime number as composite, but it is possible for a composite 
number to be reported as prime. For almost all probabilistic tests 
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the probability of error can be reduced by repeating the test with 
several independently chosen a’s. 

Some additional information see, for example, in [Buch09], 
[DeKo13], [DeKo18], [Wiki20]. 


Fermat primaliry test; Poulet and 
Carmichael numbers 


2.3.5. The simplest probabilistic primality test is the Fermat pri- 
mality test. 

It is only a heuristic test; some composite numbers (Carmichael 
numbers) will be declared probably prime no matter what witness a 
is chosen. 

Nevertheless, it is sometimes used if a rapid screening of numbers 
is needed, for instance in the key generation phase of the RSA Public- 
key cryptographical algorithms. 

The Miller-Rabin primality test and the Solovay-Strassen primal- 
ity test are more sophisticated variants of a probabilistic primality 
test. 

The Fermat primality test uses the Fermat’s little theorem. 


Theorem (Fermat’s little theorem). [fp is a prime and a is an 
integer coprime to p, then 


Let proof this theorem by induction. 


For a = 1, one has 1? = 1(mod p). 
Going from a to a+ 1, we obtain 


+ipsars(Tartee(? ) +1=a+1(mod p), 


as the binomial coefficients (?) = 0(mod p) for k = 1,...,p — 1. 


In fact, if we want to test if n is prime, then we can pick random 
a in the interval [2,n — 1] and see if the congruence 


a"! = 1(mod n) 
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holds. If the congruence does not hold for a value of a, then n is 
composite. If the equality does hold for many values of a, then we 
can say that n is a probably prime, or a pseudoprime. 


2.3.6. More exactly, a composite number « is called a Fermat pseu- 
doprime to base a if the number a is coprime to x, and it holds 


a®~1 = 1(mod 2). 


A Poulet number (or Sarrus number) is a Fermat pseudoprime to 
base 2. 

The smallest Poulet number is 341. It is not a prime, since it 
holds 


=o, 
but it satisfies the Fermat’s little theorem: 
2340 = 1(mod 341). 


The first few Poulet numbers are 341, 561, 645, 1105, 1387, 1729, 
1905, 2047, 2465, 2701, ... (sequence A001567 in the OEIS). 


2.3.7. A number x that is a Fermat pseudoprime for all values of a 
that are coprime to zx is called a Carmichael number. 

It is proven (Korselt, 1899), that 

e a positive composite integer n is a Carmichael number if and 
only if n is square-free, and for all prime divisors p of n, it is true 
that p—1 divides n —1. 

A. Korselt was the first who observed these properties, but he 
could not find an example. 

In 1910, R. Carmichael found the first and smallest such number, 
561. 

That 561 is a Carmichael number can be seen with the Korselt’s 
theorem. Indeed, 


561 = 3-11-17 


is squarefree, and 2|560, 10|560, 16/560. 
The next few Carmichael numbers are 1105, 1729, 2465, 2821, 
6601, 8911, 10585, 15841, 29341, ... (sequence A002997 in the OEIS). 
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In fact, 1105 = 5-13-17, 1729 = 7-13-19, 2465 = 5-17- 29, 
2821 = 7-13-31, 6601 = 7- 23-41, 8911 = 7-19-67, etc. 

We can see, that the first Carmichael numbers are very special: 
they are obtained as a product of three distinct primes. The corre- 
sponding property was proven by J. Chernick (1939): 

e the number (6k + 1)(12k + 1)(18k +1) is a Carmichael number 
if its three factors are all prime. 

The first Carmichael number with 4 prime factors is 41041: 


41041 = 7-11-13-41. 
The first Carmichael number with 5 prime factors is 825265: 
825265 = 5-7-17-19- 73. 


(For more infirmation see sequence A006931 in the OEIS.) 

It is proven (Alford, Granville and Pomerance, 1994), that 

e there exist infinitely many Carmichael numbers. 

Specifically, for sufficiently large n, there are at least n?/7 
Carmichael numbers between 1 and n. 

This makes tests based on Fermat’s little Theorem slightly risky 
compared to others such as the Solovay-Strassen primality test. 

Still, as numbers become larger, Carmichael numbers become very 
rare. For example, there are 1401644 Carmichael numbers between 
1 and 10!° (approximately one in 700 billion numbers.) 

The proofs of these properties and some additional informa- 
tion see, for example, in [AGP94], [Buch09], [Cher39], [Deza17], 
[DeKo18], [Uspe76], [Vile14]. 


Solovay-Strassen primality test 


2.3.8. The Solovay-Strassen primality test, developed by R.M. Solo- 
vay and V. Strassen, is a probabilistic test to determine if a number 
is composite or probably prime. 

It has been largely superseded by the Miller-Rabin primality test, 
but has great historical importance in showing the practical feasibil- 
ity of the RSA cryptosystem. 
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L. Euler proved that for a prime number p and any a € [1,p— 1], 
it holds 


(<) =a’? (mod p), 


P 


where G) is the Legendre symbol. It is so called Euler’s criterion. 


In fact, by the Fermat’s little theorem, a?~! = 1(mod p), and, 
hence, a?~' — 1 = 0(mod p). In other words, 


(a*): == (a> — 1) (a> + 1) = 0(mod p). 


As p is a prime, we get 


p-l 


a = —1=0O(mod p), or at +1= O(mod p). 


Therefore, for any a coprime with an odd prime p, it holds 


p—-1 p—-1 


a 2 =1(mod p), or a = =-—1(mod p). 


If a is a quadratic residue modulo p, there exists an integer x79, such 
that x22 = a(mod p). In this case, using the Fermat’s little theorem, 
we have 


az = ap! = 1(mod p). 


As for a quadratic residue a modulo p its Legendre symbol 2) is 
equal to 1, we get the congruence 


G2 = (<) (mod p). 


For a quadratic nonresidue a modulo p in holds (5) = —1, and the 


proof follows by similar way. 
The Jacobi symbol (<), defined by 


a a \* a \° 
—-)=(— mat for odd n= pf? -...- pp*, 
(*) (~) (*) va nt 


is a generalisation of the Legendre symbol. The Jacobi symbol can be 
computed in time O((logn)?) using the law of quadratic reciprocity. 
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Thus, if we have a value n and want to determine if it is prime, 
we can check many random values of a € [2,n — 1] and make sure 
that the congruence 


(=) = a> (mod n) 
n 

holds. If it does not hold for some a, we know, that n must not be 
prime. 


2.3.9. Much like with the Fermat primality test, however, there are 
liars. 

A value a is known as an Euler liar if the congruence (¢) = 
a" = (mod n) holds, but n is composite. 

An Euler witness is a value of a such that the equality does not 
hold when n is composite; that is to say that a is a witness for the 
compositeness of n. 

Unlike the Fermat primality test, for every composite n at least 
half of all a € [1,p — 1] are Euler witnesses. Therefore, there are 
no such values that are guaranteed to be liars all the time, like 
Carmichael numbers are for Fermat test. 

So, the test declares a composite n as probably prime with a 
probability at most 2~*, where k is the number of different values of 
a we test. 

The algorithm of calculation of Jacobi symbol, as well as some 
additional information see in Chapter 1, section 1.3, and, for exam- 
ple, in [Buch09], [DeKo13], [DeKo18], [IrRo90], [Knut68}. 


Miller-Rabin primality test 


2.3.10. Just like with the Fermat and Solovay-Strassen tests, with 
the Miller-Rabin test we will rely on an equality or a set of equalities 
that hold true for prime values, and then see whether or not they 
hold for a number that we want to test for primality. 

The original version of the Miller-Rabin primality test, due to 
G.L. Miller, was deterministic, but it relies on the unproven gen- 
eralized Riemann hypothesis; M.O. Rabin modified it to obtain an 
unconditional probabilistic algorithm. 
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First, consider a behaviour of square roots of unity in the finite 
field (Z/pZ,+,-), where p is a prime. Certainly, 1 and —1 always 
yield 1 when squared modulo p; call these trivial square roots of 1. 
As p is a prime, there are no non-trivial square roots of 1. It is, for 
example, a special case of the result that in a field, a polynomial has 
no more zeros than its degree; so, the polynomial x? — 1 has the only 
roots +1. 


Now, let p be an odd prime, then we can write p—1 as 2"-d, where 
k is an integer, and d is odd. Then, one of the following congruences 
must be true for any integer a coprime to p: 


at =1(mod p), or a*4=-—1(mod p) for some r € [0,k — 1]. 


In fact, for odd prime p and for any integer a coprime to p we 
get by the Fermat’s little theorem the congruence a?~! = 1(mod p). 
Then, using the decomposition p — 1 = 2" - d, we obtain 


fl olee 4 is Crim == (a2 "4 - 1)(a2 "4 —1) 


= (a 441)" ea ard — 1) 

= (a 441) 44-1)-... 4 4:1)(4-1) 
=" Fh @? “84 1)s.. 362? +i) —1) 
= 0(mod p). 


As p is a prime, then 
a2*441=0(mod p), or a” 4 +1=0(mod p), 
. or a®4+1=0(mod p), or at+1=0(mod p), 
or at —1=0(mod p). 
Therefore, 


aed — gk-2.q _. 


—1(mod p), or a = -—1(mod p), 


. or a®4=~—1(mod p), or at =—1(mod p), 


or a? = 1(mod p). 


The Miller-Rabin primality test is based on the contrapositive 
of the above claim. That is, for a given odd number n, for which 
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n—1= 2" -d, if we can find an a such that 
at #1(mod n), and a?4#4—-1(mod n) for all r € [0,n — 1], 


then a is a strong witness for the compositeness of n. Otherwise n 
can be prime, but can also be composite. 


2.3.11. If n is a composite number, such that 


d 


at =1(mod n), or a®4= 


=-—1(mod n) for some r € [0,n — 1], 
the base a is called a strong liar, and n is a strong probable prime to 
base a. 

The smallest odd composite strong probable primes (SPRP’s) are 
the following: 


e 2047 = 23-89 isa 2-SPRP; e 781 = 11-71 is a 5-SPRP; 
e 121=11-1lisa3-SPRP; e 25=5-5 isa 7-SPRP. 


For every odd composite n, there are many witnesses a. In fact, 
for a given composite number n, at least 3 of numbers a € [2,n — 1] 
are witnesses of compositeness of n. 

However, no simple way of generating such an a is known. The 
solution is to make the test probabilistic: we choose a randomly, and 
check whether or not it is a witness for the compositeness of n. If 
n is composite, most of the numbers a are witnesses; thus, the test 
will detect n as composite with high probability: the test declares a 
composite n as probably prime with a probability at most 4~", where 
k; is the number of different values of a we test. 

The examples of primality testing and some additional informa- 
tion see, for example, in [Buch09], [DeKo13], [DeKo18}. 


Criterions of prime numbers 


However, there exist several classical criterions of primality of a given 
positive integer n. 


2.3.12. A well-known criterion of primality is given by the Wilson’s 
theorem (also known as Al-Haytham’s theorem). 
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Theorem (Wilson’s theorem). A positive integer p is a prime 
number if and only if 


(p — 1)! = —1(mod p). 


Consider two proofs of this theorem. 
The first proof uses the fact that if p is an odd prime, then the 
set of residue classes Z/pZ* = {[1]p, [2]p, ..-, [> — 1]p} forms a group 
under multiplication modulo p. 

This means that for each element [a], € Z/pZ*, there is an unique 
inverse element [b], € Z/pZ* such that ab = 1(mod p). 

If a = b(mod p), then a? = 1(mod p), which forces 


o? —1 = (a+1)(a~1) = O(mod p), 


and since p is prime, this forces 
a=1, or a=-—1(mod p), 


i.e., a = [1]p, or a = |p — 1]p. 

In other words, [1], and [p — 1], are each their own inverse, but 
every other element has a distinct inverse, and so if we collect the 
elements from Z/pZ* pairwise in this fashion and multiply them all 
together, we get the product —1. 

For example, if p = 11, we have 


10! = (1- 10)(2- 6)(3- 4)(5 - 9)(6- 8) = —1(mod 11). 
If p = 2, the result is trivial to check. 
For a converse, suppose the congruence 
(n — 1)! = —1(mod n) 


holds for a composite n, and note that then n has a proper divisor d 
with l<d<n. 
Clearly, d divides (n — 1)!. But by the congruence above, d also 
divides (n — 1)! +1, so that d divides 1, a contradiction. 
The second proof is thus. 


Suppose p is an odd prime. Consider the polynomial 


g(x) = (w@ — 1)(@ — 2)... (@- (p—1)). 
If f(x) is a non-zero polynomial of degree d over a field F’, then f(z) 


has at most d roots over F’. Now, with g(x) as above, consider the 
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polynomial 


f(x) = g(x) — (a? - 1). 


Since the leading coefficients cancel, we see that f(x) is a polynomial 
of degree at most p—2. Reducing modulo p, we see that f(a) has at 
most p— 2 roots modulo p. 

But by the Fermat’s little theorem, each of the elements 1, 2, ..., 
p—1isa root of f(x). This is impossible, unless f(x) is identically 
zero modulo p, i.e., unless each coefficient of f(a) is divisible by p. 
But since p is odd, the constant term of f(x) is just (p—1)!4 1, and 
the result follows. 

This theorem was first discovered by Ibn al-Haytham (also known 
as Alhazen), but it is named after J. Wilson (a student of an English 
Mathematician E. Waring) who rediscovered it more than 700 years 
later. E. Waring announced the theorem in 1770, although neither 
he nor J. Wilson could prove it. J.-L. Lagrange gave the first proof 
in 1773. There is evidence that G.W. Leibniz was also aware of the 
result a century earlier, but he never published it. 

Unfortunately, the Wilson’s theorem is useless as a primality test, 


since computing (n — 1)! is difficult for large n (see, for example, 
Chapter 5, section 5.6). 


2.3.13. There is also a generalization of the Wilson’s theorem, due 
to C.F. Gauss: 
e for a given positive integer m, it holds 


WMicwcs géatasy si a= —1(mod m), for m= 4, p™, 2p, 
where p € P\{2},a EN; 
Ti<a<mgea(am)=1%=1(modm), otherwise. 


2.3.14. It is easy to check, that 

e an odd positive integer p greater than 1 is a prime number if 
and only if it can be represented in only one way as the difference of 
two squares of positive integers: 


p=2'?-y’, x,y EN. 
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In fact, for given odd positive integer n > 1, ifn = a-b, 
a<b,a,b EN, then 


_ a+b _ b—a\? a+b b-a@ x. 
aoe Gar 2 /’? 2° 2 


moreover, any representation of n in the form n = x? — y?, 2,y EN, 


gives decomposition n = a-b, a < b,a,b € N, where a = x — y, 
a-+-b _ b-a 


DY 2 
If p is a prime, we have the only decomposition p = 1- p; so, we 


b=2+y, and, hence, x = 


get the only representation of p as the difference of two squares of 
positive integers: 


l+p\? (p—-1\? 1+p p-1 
= | —— ] — {| —— ——, — EN. 
sf (S ) i a a 
In n is a composite number, it has at least two decompositions, 


n=l1-n, and n=a-b,1l<a<b<n, 


so, we get at least two representations of n as the difference of two 


squares. 

This theorem is a base of the Fermat’s factorization method. 

For a representation n = 2? — y?, we have x? > n and, obviously, 
ye =z? —n. 

So, using Fermat’s factorization method, one tries various values 
of x, starting from x = [,\/n], hoping that 2? — n = y’, a square; in 
this case, n = (a + y)(x — y). For an odd composite number n, we 


n+1 
wee 
In its simplest form, Fermat’s method might be even slower than 


find such square for some x < 


trial division (worst case). Nonetheless, the combination of trial divi- 
sion and Fermat’s is more effective than either. 


2.3.15. The following criterion of primality for a given positive inte- 
ger n is more effective: 

© a positive integer n > 2 is a prime number if and only if there 
exists some positive integer a, 1<a<n, such that 


a” =1(mod n), and a? #1(mod n) 


for all positive integers y|(n — 1). 
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In fact, by multiplicative order’s properties, we obtain from the 
n-1 — 


condition a (mod n), that ord, a|(n—1), and from the second 
condition it follows, that ord, a = n—1. As ord, a|¢(n), then n — 
1|d(n); as O(n) < n for n £1, then d(n) =n—-l,ie, ne P. 
Conversely, if n is a prime number, then there exists a primitive 
root g modulo n. It is a generator of the group Z/nZ*. Such a gen- 
erator has order |Z/nZ*| = n—1 and both equivalences will hold for 


any such primitive root: 


g” '=1(mod n), and g’ #1(mod n) 


for all positive integers y|(n — 1). 


Of course, there is no need to check all positive integer exponents 
y|(n — 1). It is enough to check only 7 of the form nel for all prime 
divisors of n. So, we get the following criterion of primality: 

© a positive integer n > 2 is a prime number if and only if there 
exists some positive integer a, 1<a<n, such that 


a+ =1(mod n), and aa # 1(mod n) 


for any prime factor q of n. 


It is a result of a French mathematician Francois Edouard Anatole 
Lucas (1842-1891). 

In Computational Number Theory, the corresponded test is called 
the Lucas test. 

It is deterministic primality test, which can be applied to any 
positive integer n > 2. However, it requires that all prime factors of 
nm — 1 are known. 

The Lucas test relies on the fact that the multiplicative order of 
a number g modulo n is n — 1 for a prime n, when g is a primitive 
root modulo n. If we can show g is primitive root modulo n, we can 
show n is prime. 

For example, take n = 71. Then n—1 = 70, and the prime factors 
of 70 are 2,5 and 7. We randomly select an a = 17, a < n. Now we 
compute 


17 = 1(mod 71). 
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It is known that for any integer a coprime to n it holds 
a"! = 1(mod n) if and only if ordy(a)|(n — 1). 


Therefore, the multiplicative order of 17 modulo 71 is not necessarily 
70 because some factor of 70 may also work. So check 70 divided by 
its prime factors: 


17°° = 70 # 1(mod 71), 1714 = 25 #1(mod 71), 17/° = 1(mod 71). 


Unfortunately, we get that 171° = 1(mod 71). So we still don’t know 
if 71 is prime or not. 

Let try another random a, this time choosing a = 11. Now we 
compute 


11 = 1(med 71). 


Again, this does not show that the multiplicative order of 11 modulo 
71 is 70 because some factor of 70 may also work. So check 70 divided 
by its prime factors: 


11°° = 70 # 1(mod 71), 1114 = 54 4 1(mod 71), 
1 39. ipod 71). 


So, the multiplicative order of 11 modulo 71 is 70, and thus 71 is 
prime. 

To carry out these modular exponentiations, one could use a fast 
exponentiation algorithm like binary or addition-chain exponentia- 
tion. 

Note that if there exists an a < n such that the first equivalence 
fails, we get that a is a Fermat witness for the compositeness of n. 


2.3.16. The Pocklington—Lehmer primality test is a deterministic 
primality test (devised by H.C. Pocklington and D.H. Lehmer), which 
uses a partial factorization of n — 1 to prove that an integer n is a 
prime number. 

It produces a primality certificate to be found with less effort than 
the Lucas primality test, which requires the full factorization of n—1. 

The basic version of the test relies on the Pocklington criterion 
which is formulated as follows. 
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Theorem (Pocklington criterion). A positive integer n > 1 is a 
prime number if and only if there exist numbers a and p such that: 


a) a®-1=1(mod n); 
b) p is prime, p|(n—1), andp> J/n-1; 
n—1 

c) gcd(a > —1,n)=1. 

For the proof of this criterion, see Chapter 5, section 5.5. 

Note, that the first condition a’! = 1(mod n) is simply the 
Fermat primality test. 

If we find any value of a, not divisible by n, such that this con- 


gruence is false, we may immediately conclude that n is not prime. 
For example, let n = 15. With a = 2, we find that 


a= 2 = 4S Tmod 15); 


This is enough to prove that n = 15 is not a prime number. 

The proofs of all theorems, as well as many examples and 
some additional information see, for example, in [Bras88], [Buch09], 
[DeKo13], [DeKo18], [Dick05], [Kob187], [Kost82], [LiNi96], [Wiki20]. 


Exercises 
1. Find all primes on the interval [1,100]; [1,300]. 


2. Check the primality of the number 7; 17; 27; 37; 47, 57; 67; 77, 
87; 97. 


3. Prove, that the last digit of any odd prime number is 1, 3, 7, 9. 
4. Prove, that n € P if and only if SS [=] — [2 | =2. 


5. Prove, that p = —1(mod 4) is a prime if and only if p can be 
represented, and in only one way, as a difference of two squares 
of integers. 


6. Prove, that p = 1(mod 4) is a prime if and only if p can be 
represented, and in only one way, as a sum of two squares of 
integers. 


7. Check, that 561, 645, 1105, 1387 are Poulet numbers. 
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8. Check, that 1105, 1729, 2465, 6601 are Carmichael numbers. 


9. Prove, that the number (6k +1)(12k+1)(18k+4+ 1) is a Carmi- 
chael number if its three factors are all primes. 


10. Prove the Gauss formula above. 


2.4 Formulas of primes 


2.4.1. In Mathematics, a formula for primes is a formula generating 
the prime numbers, exactly and without exception. No such formula 
is known. 

There are many examples of formulas generating important sets 
of integers. 

Thus, the n-th triangle number is defined as $3(n) = S3(n—1)+n, 
S3(1) = 1, and we get the closed form expression 

S3(n) = mast) i 

The n-th m-gonal number is defined as S;,(n) = Sm(n—1)+(m— 

2)n, Sm(1) = 1, and we get the closed form expression 


n((m — 2)n—m-+ 4) 


S3(n) = a 


The n-th Fibonacci number is defined as uy = Un—1 + Un—2, Uy = 
ug = 1, and we get the closed form expression 


where a = Ly B= 1-5 (Binet’s formula). 


All Pythagorean triples (x,y,z) can be obtained as 
zt = k(n? —m?), y=k(2mn), z = k(n? +m”), 


where k,n,m € N, n >m, and n,m are coprime and not both odd. 

In fact, to obtain prime numbers, it is natural to ask for functions, 
defined for all positive integer n, which are computable in practice 
and produce all or some prime numbers. For example, one of the 
following conditions should be satisfied: 
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e f(n) = pp for all n > 1; 
e f(n) is always a prime number, and if m #n, then f(n) 4 f(m); 


e the set of prime numbers is equal to the set of positive values 
assumed by the function f(n). 


Prime-generating polynomials 


2.4.2. It is known (Goldbach, 1752) that no non-constant polyno- 
mial f(x) with integer coefficients can give primes for all integer 
values of x. 


Theorem (Goldbach’s theorem). There is no non-constant poly- 
nomial f(x) with integer coefficients, which gives a prime for any 
integer value of x. 

The proof is simple. 


Suppose such a polynomial existed. Then f(1) would evalu- 
ate to a prime p, so f(1) = O(mod p). But for any k, f(1+ kp) = 
O(mod p) also, so f(1+kp) cannot also be prime (as it would be divis- 
ible by p) unless it were p itself, but the only way f(1+ kp) = f(1) 
for all k is if the polynomial function is constant. 
A.-M. Legendre showed that 
e there is no rational algebraic function which always gives primes. 


Using more Algebraic Number Theory, one can show an even 
stronger result: 

e no non-constant polynomial f(n) exists that evaluates to a prime 
number for almost all integers n. 

It was shown also (Reiner, 1943), that 

e if fi,gi, 1 = 1,...,.n, are polynomials with positive coefficients, 
then Soy fi(x) cannot gives only primes for x EN. 


2.4.3. Howewer, there exist polynomials which can give many prime 
numbers. 
So, the Euler polynomial (Euler, 1772) 


f(t) =e7 +2441 
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gives a prime for all non-negative integers less than 40. The primes 
for n = 0,1,2,3... are 41, 48, 47, 53, 61, 71, ..... The differences 
between the terms are 2, 4, 6, 8, 10, ..... For n = 40, it produces a 
square number, 1681, which is equal to 417, the smallest composite 
number for this formula. In fact, if 41 divides n, it divides f(n), too. 

The quadratic polynomial x? — 2 + 41 (Legendre, 1798) gives the 
same prime numbers for « = 1,...,40, and gives composite numbers 
for 41 and 42. 

The polynomial 


g(x) = «? — 79x + 1601 


gives primes for x = 0,...,79, corresponding to the 40 primes given 
by the above formula, taken twice each. 

Moreover, any polynomial 2? + 2 + q, q = 2,3,5,11,17, gives 
primes for all x = 0,...,q — 2. 

It is known, based on the Dirichlet’s theorem on the existence of 
primes in a given arithmetic progression (Dirichlet, 1837), that 

e linear polynomial function f(x) = ax + b produce infinitely 
many primes as long asa and b are relatively prime. 

Note that no such function will assume prime values for all values 
of n. 

In particular, there are infinitely many primes of the form 4a — 1, 
4x +1, 62-1, 62 +1. 

It is not known, however, whether there exists a polynomial of 
degree greater than one that assumes an infinite number of values 
that are primes. In particular, it is not known, whether there are 
infinitely many primes of the form ax? + bx + c, and especially, of 
the form x? +1. 

Howewer, it was proven by J.P.G.L. Dirichlet, that, for integers 
a, b, c, such that gcd(a,2b,c) = 1 and b? = ac, the polynomial in 
two variables ax? + bry + cy? represents infinitely many primes. In 
particular, there are infinitely many primes of the form x? + y?, and 
of the form x? + y? + 1. 

The proofs of these facts and some additional information see, 
for example, in [Buch09], [ChFa07], [DeKo13] [DiDe63], [HaWr79], 
[Lege79], [Step01]. 
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Prime formulas of the first kind 


2.4.4. In this subsection we consider some formulas, which give the 
n-th prime number as a function of the number n. These formulas 
have little practical value: most primality tests are far more efficient. 
Moreover, they usually involve constants that cannot be determined 
without previous knowledge of the primes themselves. 

W. Sierpitiski, 1952, suggested define a constant A as follows: 


CoO 
A= /pn10~*" = 0.02030005000000070. .. 


n=1 


Then, using the floor function |x| (the greatest integer less than or 
equal to 2) we have this exact folrmula for n-th prime number: 


pm = (10? A] —10?"" J10?"" - a]. 


In fact, 
n-1 : : 
10?" A = S/pyl0?"-** + pn +S) ppl", 
k=1 k>n 


and we obtain that 


n-1 
[10?" A] = $*p,10?"-" + pp + p pa 


k=1 k>n 


AS pn < 22"~" for n > 1, we have that 


m4 102"-2"** < (0.2)?", and pn4el07"-2"" < (0.2), 
Pn+ + 


So, 

Se ey a 2) oe Sa i, 

k>n t>1 t>1 

i.e., |Dken pelo? "| =0, and |102" A] = 0%! p,10?"-2" + pp. 
On the same way, we obtain that 


n—2 


[10 | = > p.107"*-?* + DPn—-1; 
k=1 
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and, therefore, 
n—2 
nm—1 nm—1 n k n—1 
102 10? Al = S~ ppl0?”—* + 10?" ppt. 
k=1 
As 102”-2""" = 102""", we obtain the result. 


2.4.5. G.H. Hardy and E.M. Wright, 1979, gave a variant of the 
formula above. Let r be an integer greater than one, and define a 


constant B as follows: 


= 2 
B= S- par 
n=1 
Then we obtain the n-th prime from the formula 
Pn = |r” B| =p [roo BI. 


2.4.6. By using the Wilson’s theorem, an other formula to test, 
whether any number z is a prime, can be established (Willans, 1964). 


In fact, consider a function 


4 0 


The function gives the value 1, if x is prime, and 0, if x is composite; 
f=. 

Then prime counting function 7(x), ie., the number of primes 
less than or equal to x, can be written now as 


n(x) =-1+5> FO). 
j=l 


The n-th prime number p, can then be written as 


or, equivalently, as 


m4 (5 pore)" 
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2.4.7. Alternatively, we can write m(m) = do, ou 


[uy | , and then write 


m+ >| (ay "| 


Consider the construction of the last formula. 


obtain that m(m) > n for any m > pp, and, therefore, 


“_< —"_ <1, and nl 
l+a(m)~ n+1 ar 1+7(m) —— 


On the other hand, 7(m) < n for any 1 < m < py, and, therefore, 


1/n 
n ; n 
1 < ——— <n< py < 2”, ie, 1s (4) <2, 


~ T+x(m) T+ mm 
si (tes) | 
So, 

+> (em 1)" fae Sra 140 1) =Dn 


It is known, that p, < 2” for any n € N. As m(p,) = n, we 


2.4.8. Another approach (Ruiz, 2000) does not use factorials and 
the Wilson’s theorem, but also heavily employs the floor function: 


first define 
pe EB (+E (EA-ED) 
j=2 J s=1 rs : | ) 
and then 
2(|nlogn-+1]) 


mE") 


k=1 
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2.4.9. One more formula of such kind was obtained in 1971: 


1 1 p(d) 
a ce aes 
Pe log2 a+ dy ae-i) | 
d|Pn—-1 


where ju(n) is the Mobius function, and P,-1 = pi: ... - Pn—1.- 
Consider the proof of the last formula. 
It is sufficiently to show, that p, is the only one integer, such 


that 


1 u(d) 
1<2Pr | —- 2o. 
= 2 ‘ 2» a¢_—1] — 
d|Pn—1 
In fact, if pp < a < pp4i, then 


u(d) 


1 
gPn < 2% < OPnt1 ie. QPn. gles. (-34+D ap, Ha ) 29. 


and 


QPn . glose (-34+Du1p,_, He) S il. 


d 
Let S — d|Pa—a OR 
Then (using the property oa pid) = 1 tor » = 1, and 
agin H(d) = 0, otherwise) we have: 


Pn 1) 5 = Falla 
( -1)S= Pe Ll a i 
d|Pn—-1 
= SO dat 2t+- 4 2P 14) 
d|Pn—1 


a SS ( ‘> wd) )2! 


O0<t<Pp—1 ‘d\gcd(t,Pn—1) 


= Ss" 2 ape 


0<t<Pn—1,gcd(t,Pn—1)=1 


te S> oe 


0<t<Pn—1—1,gcd(t,Pn—1)=1 
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Then 


_ 9Pn-1 ae : ott _ 9Pn-1 +1 
0<t<Pn—1—1,gcd(t,Pn—1)=1 
=] + S ott =] 
0<t<Pn—1—l,gced(t,Pn—1)=1 


+ Ss ae 


0<t<Pn—1—pn,gcd(t,Pn—1)=1 


Really, if 2 < j < pp, then there exists g € P, such that q|j. 
But then gq < pn, ie., g|Py—1, and, hence, g|P,-1 — 7. Therefore, if 
0<t<P,-—1, and gcd(t, P,-1) =1, then 0 <t < Py-1— pn. 

1 

Let ylo<t<Py-1—pn,ged(t,Pa_1)=1 2, = Dy» Then 
11+ > oe eee QPn-1—Pntl — QPn-1—Pn tl. 

2. 14+)> > QPn—-1—Pnt! as for t = Py-1—pn we have ged 24 ) Se 
if q|t, q|P,—1, then q|pn, a contradiction. Therefore, 


9Pn—-1—pn+1 1 il + > 9Pn-1+2 = il 9Pn-1—Pnt+2 


9Pn—1tl < —3t8 ~ 2(2Pn-1 — 1) . 9Pn—itl _ 9 - 9Pn—itl ” 


and 1 < 2Pn(—$. +S) < 2. 
Some additional information see, for example, in [Dezal7], 
[DeKo13], [Dick05], [HaWr79], [Sier64], [Step01]. 


Primes formulas of the second kind 


2.4.10. In this subsection we consider some formulas, which give 
distinct prime numbers for any value of argument. 

The first such formula known was established in 1947 by W.H. 
Mills, who proved that there exists a real number 6 such that 


[a""| 
is a prime number for all positive integers n. The smallest such @ has 
a value of around 1.3063... and is known as the Mills’ constant. 
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This formula has no practical value, because very little is known 
about this constant (not even whether it is rational), and there is no 
known way of calculating the constant without finding primes in the 
first place. 


2.4.11. Similarly (Wright, 1951), the function 


sih= Ean 


(a string of n exponents) gives a prime for every n > 1. 

Here w is a number which is roughly equal to 1.9287800... . 

So, g(1) = 3, g(2) = 13, g(3) = 16381, and g(4) has more than 
5000 digits. 

The fact that 6 and w are known only approximately and the num- 
bers grow very fast, making these formulas no more than curiosities. 

The following function yields all the primes, and only primes, for 
non-negative integers n: 


f(n) =2+4+ rest(2n!,n + 1). 


This formula is based on the Wilson’s theorem; the number two is 
generated many times and all other primes are generated exactly 
once by this function. In fact, a prime p is generated for n = p — 1, 
and 2 is generated, otherwise; that is, 2 is generated when n + 1 is 
composite. 

Some additional information see, for example, in [Buch09], 
[DeKo13], [Sier64], [HaWr79], [Step01]. 


Prime formulas of the third kind 


2.4.12. In this subsection we consider the formulas, which generate 
the set of primes as the set of their positive values. 

It was proved by Y. Matiyasevich in 1971, that 

e there is a polynomial in several variables with integer coefficients 
such that the set of primes is equal to the set of positive values of this 
polynomial obtained as the variables run through all non-negative 
integers. 

The first such polynomial discovered was the following polynomial 
in 26 variables of degree 25 (Sato, Wada and Wiens, 1976): 
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(k+2){1—[wz+h+j—q)?—[(gk + 2g +k+1)(h4+j) +h—-2]?- 
ntp+gte—el? =(16b+1)4(F42)m+1)? +1— 72? =| (e+ 
2)(a +1)? +1 — 07]? — [(a@? — 1)y* +1 — 27]? — [16r2y4(a? — 1) +1- 
u’]? — [((a + u2(u? — a))? — 1)(n + 4dy)? + 1 — (2 + eu)?]? — [n +1 + 
v—yl)? —[(a@ -1)? +1-m?)? -[ait+k+1—-1-i? -[p+l(a-n- 
1) + b(2an + 2a — n? — 2n — 2) — mJ? — [g+ y(a—p—1)+s(2apt+ 
2a — p* — 2p — 2) — a]? — [z+ pl(a — p) + t(2ap — p? — 1) — pm)’}. 


Notice that this polynomial factors. Look at the special form of 


the second part: it is one minus a sum of squares, so the only way 
for it to be positive is for each of the squared terms to be zero. Can 
you find a values (a, b, c, d, ...., z) (all non-negative) for which the 
polynomial above is positive? 

The record for the lowest degree of such a polynomial is 5 (with 
42 variables), and the record for fewest variables is 10 (with degree 
about 1.6 - 10*°). 

In the view of the polynomial above, we can say, that a set of Dio- 
phantine equations in 26 variables can be used to obtain primes. In 
fact, a given number 4+ 2 is prime if and only if the following system 
of Diophantine equations has a solution in the natural numbers: 


0 = wzth+j-4q, 

= (gk +2g+k+1)(h+j) +h—z, 

= 16(k + 1)8(k + 2)(n +1)? +1 - f?, 

. = 2p +g +e, 

. = (e+ 2)(a+1)2+1-0?, 

= (a? —1)y?+1-27, 

0 = 16r7y*(a? — 1) +1—v?, 

0 = n+l+v—-y, 

? = (a? — 1)? +1—m?, 

0 = ai +k+1—1-i, 

0 = ((a@+u*(u* —a))’ — 1)(n + 4dy)* +1—- (2 + eu)’, 
0 = ptl(a—n—1)+4+ b(2an + 2a — n? — 2n —2)—m, 
0 = gqt+y(a—p—1)+s(2ap+ 2p — p* — 2p — 2) —z, 
_ z+pl(a —p) + t(2ap — p? — 1) — pm. 
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A general theorem of Matiyasevich says that the range of every 
recursively enumerable function may be given by the solutions to a 
set of Diophantine equations in 9 variables, but in general of very high 
degree. This implies the existence of a set of Diophantine equations 
in 9 variables that has the same property as the above one. Jones 
showed that there also exists such a set of equations of degree only 
4, but in 58 variables. 

Some additional information see, for example, in [Buch09], 
[DeKo13], [Mati93]. 


Formulas of primes and Fermat and 
Mersenne numbers 


2.4.13. At first glance, it seems likely that primes could be produced 
by taking a high power of a fixed integer k and adding or subtract- 
ing l. 

In fact, after the simplest algebraic function, a polynomial, it is 
natural to consider the exponential function, f(n) = k”, or, as the 
value &” cannot give infinitely many primes, the variant of it of the 
form 


f(n) =k" +6". 


As for any positive integer n one has 
hk” —p? = (k _ b) i k?-29 + ski ofl k2pr-2 a. ye) , 


then k” — 6” can be prime only in the case k —-b=1, or k= b+ 1. 
In the simplest case we have, that 6 = 1, i.e., 


f(n) =k" -1. 
The same choice of 6 give us in the case k” + b” the function 
f(n) =k" 41. 


For k™ +1 to be prime, / must be even and the exponent m must be 
a power of 2. The simplest case k = 2 gives us the Fermat numbers 


F, = 27" +1, n=0,1,2,3,.... 
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The general case gives us the generalized Fermat numbers 


F,(b) =" +1, 2\b, n= 0,1,2,3,... 


If k” —1 is a prime, then k = 2 and m is a prime, so the problem 


is reduced to that of Mersenne numbers 


My = 2? —1. 


The proof of these properties and some additional information see, 


for example, in [Buch09], [DeDe12], [Dezal7], [Dezal8], [DeKo13], 
[HaWr79], [Lege79], [Sier64]. 


Exercises 


ile 


oo Fe Ww Ww 


10. 
I; 


Prove, that the function (—1)” + 4 generates prime numbers for 
any positive integer n. 


. Prove, that if a” +1 is a prime, then n = 2¥. 
. Prove, that if a” — 1 is a prime, then a = 2, and n € P. 
. Prove, that any number of the form 4n4 +1, n > 1, is composite. 


. Prove, that any number of the form 4n* + n? +1, n > 1, is 


composite. 


. Prove, that any polynomial x? + «+ q, q = 2,3,5,11,17, gives 


primes for all x = 0,...,q — 2. 


. Prove, that there are infinitely many primes of the form x? — y?. 
. Prove, that there are infinitely many primes of the form x? + y?. 


. Prove, that the function f(x) = |cos? 7G | gives the value 


1 if x is prime, and 0 if x is composite; moreover, f(1) = 1. 
Check, formulas for p,, given above. 


Check, that the function f(n) = 2+ rest(2n!,n+ 1) generates a 
prime p for n = p—1, and generates 2, otherwise. 
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2.5 Prime numbers in the family 
of special numbers 


Fibonacci and Lucas primes 


2.5.1. Fibonacci numbers un, n = 0,1,2,..., are defined by famous 
recurrence 


Unt2 = Untit Un, Up = 0,u, = 1. 


The first few Fibonacci numbers are 0, 1, 1, 2, 3, 5, 8, 13, 21, 34, ... 
(sequence A000045 in the OEIS). 

A Fibonacci prime is a Fibonacci number that is prime, a type of 
integer sequence prime. 

The first Fibonacci primes are 2, 3, 5, 13, 89, 233, 1597, 28657, 
514229, 433494437, ... (sequence A005478 in the OEIS). 

It is not known whether there are infinitely many Fibonacci 
primes. With the indexing starting with u; = u2 = 1, the first 34 
are uy, for the values n = 3, 4, 5, 7, 11, 13, 17, 23, 29, 43, 47, 83, 
131, 187, 359, 431, 483, 449, 509, 569, 571, 2971, 4723, 5387, 9311, 
9677, 14431, 25561, 30757, 35999, 37511, 50833, 81839, 104911 (see 
sequence A001605 in the OEIS). 

In addition to these proven Fibonacci primes, there have been 
found probable primes for n = 130021, 148091, 201107, 397379, 
433781, 590041, 593689, 604711, 931517, 1049897, 1285607, 1636007, 
1803059, 1968721, 2904353, 3244369, 3340367. 

Except for the case n = 4, all Fibonacci primes have a prime 
index, because if m divides n, then u,, also divides u,, but not every 
prime is the index of a Fibonacci prime. 

The number of prime factors in the Fibonacci numbers with prime 
index are 0, 1, 1, 1, 1,1, 1, 2, 1, 1, 2, 3, 2,1, 1, 2, 2, 2, 3, 2, 2,2, 1, 
2, 4, 2, 3, 2, 2, 2, 2, 1, 1, 3, ... (sequence A080345 in the OEIS). 

The number u, is prime for 8 of the first 10 primes p; the excep- 
tions are ug = 1 and ujg = 4181 = 37-1138. 

However, Fibonacci primes appear to become rarer as the index 
increases. The number wp is prime for only 26 of the 1229 primes p 
below 10000. 
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As of 2020, the largest known certain Fibonacci prime is u104911, 
with 21925 digits (Steine and Water, 2015). 

The largest known probable Fibonacci prime is u3340367 (Lifchitz, 
2018). 

It was proved by N. MacKinnon, that the only Fibonacci numbers 
that are also members of the set of twin primes are 3, 5, and 13. 


2.5.2. Lucas numbers Ly, n = 0,1,2,..., are defined by the same 
recurrence as Fibonacci numbers, but with different starting values: 


Lys2 = Lnsit Ln, Io = 2,f1, =1. 


The first few Lucas numbers are 2, 1, 3, 4, 7, 11, 18, 29, 47, 76, ... 
(sequence A000032 in the OEIS). 

A Lucas prime is a Lucas number that is prime. 

The first few Lucas primes are 2, 3, 7, 11, 29, 47, 199, 521, 2207, 
3571, ... (sequence A005479 in the OEIS). 

The indices of these primes are 0, 2, 4, 5, 7, 8, 11, 13, 16, 17, ... 
(sequence A001606 in the OEIS). 

If L, is prime, then n is 0, a prime, or a power of 2. La, is prime 
for m = 1,2,3 and 4, and no other known values of m. 

The proofs of the propositions above and some additional infor- 
mation see, for example, in [Buch09], [DeKo13], [Hogg69], [Voro61]. 


Prime numbers in Pascal’s triangle 


2.5.3. Pascal’s triangle is a number triangle, the sides of which are 
formed by 1, and any inner entry is obtained by adding the two 
entries diagonally above. 

It is easy to show, that elements of Pascal’s triangle coinside 
with binomial coefficients, i.e., coefficients ae nm = 0,125.3, 2205 
k = 0,1,2,...,n, of the following decomposition: 


ie a) aaa 


The first few rows of the Pascal’s triangle are 
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(0) =1 
)=1 ()=1 
() =1 G) =2 G)=1 
() =1 G)=3 G)=3 G)=1 
6) =1 G=4 G=6 G=4 @=1 
() =1 G)=5 G)=10 (3) =10 G)=5 (5) =1 
() =1 ()=6 G)=15 G)=20 G)=15 G)=6 ()=1 


It is known, that G) = ICE Using this fact, it is easy to show, 
that 

e for a prime p, the binomial coefficient (2) is divisible by p for 
any k = 1,2,...,p—1: 


(i) = 0(mod p), pE€ P, k=1,2,...,p—1. 


Consider the formula (2) = foe Since p € P, then p has no 
factors except 1 and p itself. Every entry in the triangle is an integer, 
so therefore by definition (p — k)! and k! are factors of p!. However, 
there is no possible way p itself can show up in the denominator, so 
therefore p (or some multiple of it) must be left in the numerator, 


making the entire entry a multiple of p. 

This fact allows to obtain a simple, but important property of 
Pascal’s triangle: 

e in the p-th row of Pascal’s triangle, where p is a prime number, 
all the terms except the unities are multiples of p. 

In this case we say, that the p-th row of the Pascal’s triangle is 
divisible by p. 

For additional information about divisibility of the rows of Pas- 
cal’s triangle by prime p, we need to use the Lucas’s theorem. 

This theorem, first appeared in 1878 in papers by E. Lucas, 
expresses the remainder of division of the binomial coefficient a 
by a prime number p in terms of the base p expansions of the inte- 
gers m and n: 

e for non-negative integers n and m and a prime p, if 


Al 4... +p + no, 
k-1 


n= ngp* + N~—1P 


m = mp" + my-1p +--+ +mMmyp+ mo 
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are the base p expansions of n and m, respectively, then 


(11) =I ("Joma 


This uses the convention that ("") =O0ifm<n. 

From the Lucas’s theorem we get easily that a binomial coefficient 
i is divisible by a prime p if and only if at least one of the base p 
digits of n is greater than the corresponding digit of m. 

This fact allow to obtain a criterion of divisibility of a row of 
Pascal’s triangle by a prime p: 

e the n-th row of Pascal’s triangle is divisible by a prime p if and 
only if n is a power of p, i.e, n=p', LEN. 

In fact, ifn =p', 1 € N, thenn=04+0-p+0-p?+---+1-p), 
and for 0 <m <n we have m=mo+tmpt---+m_ip'1+0-p!. 


(2) (2)(8) (8) Cine 


As there is at least one element m; 4 0 in the set {mo, m1, ..., m1}, 
then ( 0 ) = 0; it means, that (/"), 0 <n <m, is divisible by p. 


my 


Conversely, let n 4 p', | € N. In this case n = nop + np + nop? + 
--» + n,p*, where n, # 0. For n = no it holds n < p, and the 
first element (7) of n-th row of Pascal’s triangle is equal to n and, 
hence, is not divisible by p. If n > p and n ¢ p', | € N, then 
k > 1, and there exists at least one element n; in the decomposition 
n=no+nipt nop? +--- +ngp*, such that nj ~ ng, and n; 4 0. In 
this case, consider Co where m = no +nipt---+m_1p"!+0- 
p+ njaip't! +---+ngp*. It is easy to see, that 


al) te) eee 

m no ny 0 Nk 

So, m-th element ( an 0<m<_n, of the n-th row of Pascal’s triangle 
is not divisible by p, and, therefore, the n-th row itself is not divisible 


by p. 
So, we have proven, that for any p*-th row of Pascal’s triangle, 


where p is a prime number, and k is a positive integer, all the terms of 
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this row except the unities are multiples of p. Moreover, it is known 
also, that 

e for an-th row of Pascal’s triangle all the terms in this row except 
the unities are multiples of m if and only ifm is a prime number p, 
andn=p*, k EN. 

More exactly, 

e the greatest common divisor of all inner terms of n-th row of 
Pascal’s triangle is equal to p, ifn = p*, k € N, and is equal to 1, 
otherwise. 

If we consider p = 2, we get that all inner entries in 2-nd, 4-th, 
8-th,..., 2"-th,... rows of Pascal’s triangle are even. Easy to see, 
that there exist exactly two inner odd entries in the (2* + 1)-th 
row, etc. This leads to the Sierpitiski construction in the Pascal’s 
triangle modulo 2. 

The proof of Lucas’s theorem and some additional information 
see, for example, in [Bond93], [Uspe76], [Deza18]. 


Catalan primes 


2.5.4. The Catalan numbers form a sequence of natural numbers 
that occur in various counting problems, often involving recursively 
defined objects. 

The n-th Catalan number can be given directly in terms of bino- 
mial coefficients by 


n 


1 (/2n (2n)! n+k 
= = = > 0. 
Cn a ("") (n+ 1)!n! I bk? med 


The first Catalan numbers for n = 0, 1, 2, 3, ... are 1, 1, 2, 5, 14, 42, 
132, 429, 1430, 4862, ... (sequence A000108 in the OEIS). 
It is easy to check, that the only Catalan numbers C, that are 
odd are those for which n = 2" — 1, all others are even. Moreover, 
e the only prime Catalan numbers are Cy = 2, and C3 = 5. 
Really, using the formula 


Bees ("\ = 1 (2n)! 


n+l\n ~ na+l nin! 
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we get, that if a prime number p divides C;,, therefore p < 2n. On 
the other hand, it is easy to see, that 

Cyr > 2n4+1, ifn>4. 
In fact, for n = 4 it holds Cy = 14 > 2-4+1=9. Going from n 


to n+ 1, we get that 2Gn—U) > 2 for all n > 3, therefore, 
2(2n — 1 
Oy = 78 —No, > 2(2n —1) = dn —2> 2m $1, ifn>4. 
n 


So, for n > 4 the number C;, is a composite number. For n < 4 we 


have primes only for n = 2 and n = 3. 

There are some interesting divisibility properties of Catalan num- 
bers. For example, 

e if a positive integer n +2 is a power of a prime, n+2 = p*, 
k EN, then C,, is divisible by p. 

For example, 2 + 2 = 27, and Cp = 2 = 0(mod 2);5+2=7, and 
Cs = 42 = 0(mod 7); 7+ 2 = 37, and C7 = 429 = 0(mod 3). 

Similarly, we can obtain the following number-theoretical prop- 
erty: 

e ifn=p*, kEN, then Cy, = 2(mod p). 


For example, if 2 = 2', then Cz = 2 = 2(mod 2); if 3 = 3!, then 
C3 = 5 = 2(mod 3); if 4 = 27, then Cy = 14 = 2(mod 2); if 5 = 5', 
then Cs = 42 = 2(mod 5); if 7 = 7', then C7 = 429 = 2(mod 7); if 
8 = 23, then Cg = 1430 = 2(mod 2); if 9 = 37, then Cy = 4862 = 
2(mod 3). 

For references and some additional information see, for example, 
[Bern99], [Cata44], [Deza18], [Goul85], [Stan15]. 


Cullen and Woodall primes 
2.5.5. A Cullen number is a positive integer of the form 
Cu(n) =n-2"4+1, n>0. 


Cullen numbers were first studied by R.J. Cullen in 1905. 
The first few Cullen numbers are 1, 3, 9, 25, 65, 161, 385, 897, 
2049, 4609, ... (sequence A002064 in the OEIS). 
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A Cullen prime is a Cullen number, which is a prime. 

The only known Cullen primes are those for n = 1, 141, 4718, 
5795, 6611, 18496, 32292, 32469, 59656, 90825, 262419, 361275, 
481899, 1354828, 6328548 and 6679881 (sequence A005849 in the 
OEIS). 

It was shown (Hooley, 1976) that 

e almost all Cullen numbers are composite. 

H. Suyama showed that it works for amy sequence of numbers 
n-+2"+¢ 4+ >, where a and 6 are integers, and in particular also for 
Woodall numbers. 

Still, it is conjectured that there are infinitely many Cullen 
primes. 

There are several important divisibility properties of Cullen num- 
bers. For example, 

e a Cullen number Cu(n) is divisible by p = 2n—1, if p is a prime 
number of the form 8k — 3. 

Furthermore, it follows from the Fermat’s little theorem, that 

e an odd prime p divides Cu(m(k)) for each m(k) = (2% — k) - 
(p—1)-—k, KEN. 

It has also been shown that the prime number p divides Cu(2) 
when the Legendre symbol (2) is equal to —1, and that p divides 


Cu(22>) when the Legendre symbol (2) is equal to 1. Using the 
properties of (2), we get, that 


e a prime number p divides Cu(2) when p = +3(mod 8), and 
that p divides C=) when p = +1(mod 8). 

It is unknown whether there exists a prime number p such that 
Cu/(p) is also prime. 

Sometimes, a generalized Cullen number is defined to be a number 


of the form 
GCu(n) =n-b" +1, n+2> 0. 


If a prime can be written in this form, it is called a generalized Cullen 
prime. 

Least n such that n-b"-+ 1 is prime for 6 = 1, 2, 3, ... are 1, 1, 2, 
1, 1242, 1, 34, 5, 2, 1, ... (sequence A240234 in the OEIS). 
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As of 2020, the largest known generalized Cullen prime is 2805222- 
252805222 1 1. It has 3921539 digits and was discovered by T. Greer, 
a PrimeGrid participant. 


2.5.6. A Woodall number (or Riesel numer, or Cullen number of the 
second kind) is a positive integer of the form 

W, =n-2”—-1,neEN. 
Woodall numbers were first studied by A.J.C. Cunningham and H.J. 
Woodall in 1917, inspired by Cullen’s earlier study of the similarly 
defined Cullen numbers. 

The first few Woodall numbers are 1, 7, 23, 63, 159, 383, 895, 
2047, 4607, 10239, ... (Sloan’s A003261). 

Woodall numbers that are also prime numbers are called Woodall 
primes, the first few exponents n for which the corresponding 
Woodall numbers W,, are primes are n = 2, 3, 6, 30, 75, 81, 115, 128, 
249, 362, ... (sequence A002234 in the OEIS); the Woodall primes 
themselves begin with 7, 23, 383, 32212254719, ... (sequence A050918 
in the OEIS). 

As of 2020, the largest known Woodall prime is 17016602 - 
217016602 _ 4 Tt has 5122515 digits and was found by D. Bertolotti 
in 2018 in the distributed computing project PrimeGrid. 

It is proven (Keller, Suyama, 1995) that almost all Woodall num- 
bers are composite. 

Nonetheless, it is also conjectured that there are infinitely many 
Woodall primes. 

Like Cullen numbers, Woodall numbers have many divisibility 
properties. 

For example, if p is a prime, then p divides Wot if the Legendre 
symbol (2) is equal to 1, and p divides W sp—1 if the Legendre symbol 


(2) is equal to 1. So, one can say, that 


e a given prime number p divides Wp+1 if p = +3(mod 8), and p 
divides Wap-1 if p= +1(mod 8). 
2 
A generalized Woodall number is defined to be a number of the 


form 


GW (n,b) =n-b"—-1, n+2>6. 
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If a prime can be written in this form, it is called a generalized 
Woodall prime. 

Least n such that n-b” — 1 is prime for 6 = 1, 2, 3, ... are 3, 2, 1, 
1, 8, 1, 2, 1, 10, 2, ... (sequence A240235 in OEIS). 

As of 2020, the largest known generalized Woodall prime is 


GW (17016602, 17016602) = 17016602 - 217016602 _ 1. 


The needed proofs and some additional information see, for exam- 
ple, in [Guy94], [Cull05], [CuWu17], [Hool76], [Kell95). 


Bernoulli numbers and Staudt primes 


2.5.7. Bernoulli numbers By, n > 0, form a sequence of rational 
numbers which occur frequently in Number Theory and in other 
domains of Mathematics. The Bernoulli numbers appear in (and can 
be defined by) the Taylor series expansions of the tangent and hyper- 
bolic tangent functions, in Faulhaber’s formula for the sum of m-th 
powers of the first n positive integers, in the Euler—Maclaurin for- 
mula, and in expressions for certain values of the Riemann zeta- 
function. 

Formally, the n-th Bernoulli number B, can be defined by the 
following recurrence: 


n 
Bn = a (; i 1) Bos with Bo =0. 

The first few Bernoulli numbers are 0, —3, q; 0, — 3; 0, Dy 0, 
35,0, -5 

The von Staudt-Clausen theorem is a result determining the frac- 
tional part of Bernoulli numbers using some special set of primes. It 
was proven independently by K. von Staudt (1840) and T. Clausen 
(1840). Specifically, 

e if n is a positive integer and we add + to the Bernoulli num- 
ber Bo, for every prime p such that p—1 divides 2n, we obtain an 


integer, 1.€., 


1 
Byt+ S> —€Z. 
p—1|2n 


Prime numbers 83 


In other words, for any Bernoulli number By, with even index 
2n > 0, there exists a representation 


1 1 1 1 
Ban — Gon —<— a, 58 pape Gon € Z, 
Pi P2  P3 Ps 


which uses all primes p;, such that p; — 1|2n. 


For n = 1, we can see, that pj = 2, and p2 = 3, as 1]2, and 2|2. 
So, 


In fact, By = , $+4 = 2, so, Gg = ++ ($+ 4) = 4+? = 1, 
Therefore, 


For n = 5, we have p; = 2, p2 = 3, and p3 = 11, as 1{10, 2/10, and 
10/10. So, 
i of 1 
Sees 6 ee ene 
10 10-5737 Tq? 70 € 
In fact, Big = a, and $4444 = a. so, Gip9 = at($+4+4) = 
ae _ = 1. Therefore, 
1 1 1 
Py shte eS a 
™ 2 3 il 
For n = 8, we get pi = 2, po = 3, p3 = 5, pa = 17, as 1/16, 2/16, 
4|16, and 16|16. So, 


1 1 1 il 
Big=Gie-=-s-s- Gig € Z. 
16 16 — 5 3 5 WF 16 
In fact, Byg = +7510" and 3 +3 +4 + += = so, Gig = 745 + 
(5 + $ + + + +)= — a + or —7+1= -6. Therefore, 
1 1 1 1 
paw oe, 
n 2 3 5 i 


The theorem immediately allows us to characterize the denomi- 
nators of the non-zero Bernoulli numbers Bo, as the product of all 
primes p such that p— 1 divides 2n; consequently the denominators 
are square-free and divisible by 6. 

These denominators are 6, 30, 42, 30, 66, 2730, 6, 510, 798, 330, 

. (sequence A002445 in the OEIS). 


84 Mersenne Numbers and Fermat Numbers 


The proof of this theorem and some additional information see, 
for example, in [Abra74], [Apos86], [Clau40], [Dezal8], [KGP94], 
[Stau40]. 


Motzkin primes 


2.5.8. Motzkin numbers, named after an Israeli-American mathe- 
matician T. Motzkin, have diverse applications in Geometry, Com- 
binatorics and Number Theory. 

The n-th Motzkin number MN, can be defined by the recurrence 
relation 

n—-2 
MN, = MNy-1 + y MN,;MN,-2-i, MNo = MN, = 1. 
i=0 
It is the number of different ways of drawing non-intersecting chords 
between n points on a circle. 

The first few Motzkin numbers MN, for n = 0, 1, 2, ... form the 
sequence 1, 1, 2, 4, 9, 21, 51, 127, 323, 835, ... (sequence A001006 in 
the OEIS). 

A Motzkin prime is a Motzkin number that is prime. As of 
2020, only four such primes are known. They are 2, 127, 15511, 
953467954114363 (sequence A092832 in the OEIS). 

Some additional information see, for example, in [Bern99], 


[Dezal18], [DoSh77], [Motz48]. 


Palindromic and permutable primes 


2.5.9. A palindrome is an positive integer that reads the same for- 
ward or backward. Some examples of palindromes are 11, 121, 12321, 
1234321, 111, etc. 

A palindromic prime is a prime which is a palindrome. The first 
few palindromic primes are 2, 3, 5, 7, 11, 101, 181, 151, 181, 191, ... 
(sequence A002385 in the OEIS). 

As of 2020, the largest known palindromic prime (Batalov, 2014) 
is 10474500 + 999 . 10787249 4 1: it has 474501 digits. 

The first non-trivial palindromic prime is 11. In fact, it is the 
only palindromic prime with even number of digits. Except for 11, 
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all palindromic primes have an odd number of digits, because the 
divisibility test for 11 tells us that every palindromic number with 
an even number of digits is a multiple of 11. 

It is not known if there are infinitely many palindromic primes. 

Obviously, the palindromicity of a number depends on the base 
in which the number is written. For example, the sequence of 
binary palindromic primes begins (in binary) from 11, 101, 111, 
10001, 11111, 1001001, 1101011, 1111111, 100000001, 100111001, ... 
(sequence A117697 in the OEIS) and contains all Mersenne primes 
and Fermat primes. 

It is easy to check, that all binary palindromic primes except 
binary 11 (decimal 3) have an odd number of digits; those palin- 
dromes with an even number of digits are divisible by 3. 

It is known that, for any base, almost all palindromic numbers 
are composite, i.e., the ratio between palindromic composites and all 
palindromes below n tends to 1. 


2.5.10. A permutable prime (or absolute prime) is a prime which 
remains prime on every rearrangement (permutation) of the digits. 
For example, 337 is a permutable because each of 337, 373 and 733 
is prime. 

In base 10 the only known permutable primes are 2, 3, 5, 7, 13, 
17, 37, 79, 1138, 199, 337, their permutations, and the repunit primes 
R2 = 11, Rig, Rog, R317, and Rio931 (see sequences A003459 and 
A258706 in the OEIS). 

There is no n-digit permutable prime for 3 <n < 6-10!” which 
is not a repunit. It is conjectured that there are no non-repunit per- 
mutable primes other than those listed above. 

Obviously, in base 10 permutable primes of two or more digits 
may not have the digits 2, 4, 6, 8 or 5. So, all permutable primes of 
two or more digits are composed from the digits 1, 3, 7, 9. 

It is proven that no permutable prime exists which contains three 
different of the four digits 1, 3, 7, 9, as well as that there exists 
no permutable prime composed of two or more of each of two digits 
selected from 1, 8, 7, 9. Looking modulo 7 we also see they may not 
have all four of the digits 1, 8, 7, and 9 simultaneously. In fact, there 
exist the following theorem: 
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e every permutable prime is a near-repdigit, that is, it is a per- 


mutation of the integer B,(a,b) = (aaa...aab), where a and b are 
distinct digits from the set {1,3, 7,9}. 


In base 2, only repunits can be permutable primes, because any 


0 permuted to the ones place results in an even number. Therefore, 


e the base 2 permutable primes are the Mersenne primes. 
The proofs of the properties above and some additional infor- 


mation see, for example, in [BaWe76], [Gees20], [John77], [Malc86], 
[Ribe96]. 


Exercises 


1. 


10. 


Find first five Fibonacci numbers. Prove, that any prime 
Fibonacci number has a prime index. 


. Find first five Lucas primes. What one can say about their 


indexes? 


. Find the first 10 triangle numbers. What we can say about pri- 


mality of triangle numbers? 


. Find the first 10 pentagonal numbers. What we can say about 


primality of pentagonal numbers? 


. Find several prime numbers in the Pascal’s triangle. Check, that 


2-th, 4-th, 8-th row of Pascal’s triangle is divisible by 2. Check, 
that 3-th, 9-th, 27-th row of Pascal’s triangle is divisible by 3. 


. Prove, that any prime number cannot to be a perfect number. 
. Prove, that the only prime Catalan numbers are 2 and 5. 


. Check, that the set {2,3,5} is the maximal subset of P, such that 


the following property holds: for any m € M, each Pythagorean 
triple has a number, divisible by m. 


. Check, that starting with W4 = 63 and Ws = 159, every sixth 


Woodall number is divisible by 3. 


Check, that for a positive integer m, the Woodall number Wom 
may be prime only if 2” +m is prime. 


Prime numbers 87 


2.6 Open problems 


There are many famous unsolved problems in Mathematics, which 
are closely connected with prime numbers. Most of them have very 
simple form and are clean even for amateurs of Mathematics. How- 
ever, often having an elementary formulation, many of these prob- 
lems have withstood proof for decades. 


Twin primes conjecture 


2.6.1. Well-known is the irregularity of the distribution of prime 
numbers on the number line. 

For a given N, there exists an interval of length N which does not 
contain prime numbers: in fact, the number (N + 1)! +2 is divisible 
by 2, (N + 2)!+43 is divisible by 3, .... (NW +1)!+(N + 1) is divisible 
by (NV +1). 

So, we have proven the existence of arbitrarily large prime gaps. 
However, large prime gaps occur much earlier than this argument 
shows. For example, the first prime gap of length 8 is between the 
primes 89 and 97, much smaller than 8! = 40320. 


2.6.2. On the other hand, there exist many so called twin primes. 
If you look down the list of primes, you will quite often see two 
consecutive odd numbers: 3 and 5, 5 and 7, 11 and 13, 17 and 19, 
etc. We call these pairs (p, p + 2) of primes numbers twin primes 
(this name was coined by P.G.S. Stackel in 1916). 

The first such pairs are (3, 5), (5, 7), (11, 13), (17, 19), (29, 
31), (41, 43), (59, 61), (71, 73), (101, 103), (107, 109), ... (sequence 
A077800 in the OEIS). 

A question to which the answer is not known is 

e whether there exist infinitely many twin primes. 

It has been proved by V. Brun in 1919 that the series of the 
reciprocals of the prime numbers of the pairs of twin primes is finite 
or convergent. 

This famous result expresses the scarcity of twin primes, even if 
there are infinitely many of them. 
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The sum Bp of the series has been calculated by V. Brun in 1919 
to six decimal places, and now is called Brun’s constant: 


i 1 1 1 1 
Bo=(=+-2 = —4+—) +4... = 1.902160... 
; (s+z)+(s+2)+(4+H)+ 


More exactly, let 72(x) denote the number of primes p such that 
p<«x and p+2 is also a prime. V. Brun announced in 1919 that for 
x > Xo one has 

100z 
(log a)?” 


12(x) < 


The proof appeared in 1920. 

R.P. Brent, 1976, has found that there are 152892 pairs of twin 
primes less than 10!!. 

P. Sebah and P. Demichel, 2002, had shown, using all twin primes 
up to 10!°, that By = 1.902160583104... 

The greatest known pair of twin primes is the pair 2996863034895. 
21290000 + 1 (2016). It has 388342 digits. 


2.6.3. Another question to which the answer is not known is 

e whether there exist infinitely many primes p for which p, p+ 
2,p+6 and p+8 are all prime numbers. 

A quadruple (p, p+ 2, p+ 6, p+ 8) of this type is called a prime 
quadruplet. (Obviously, the numbers p, p+2, p+4, p > 3, cannot be 
all primes, because one from them is divisible by 3.) The first six con- 
secutive quadruplets are obtained for p = 5,11, 101,191, 821, 1481. 

The smallest prime quadruplet of 50 digits (Stevens, 1995) has 
the form 


1000...058537891, 93, 97, 99. 


As of 2020, the largest known prime quadruplet (Kaiser, 2019) 
has 10132 digits and starts with 


p = 667674063382677 - 238608 _ 1, 


The constant representing the sum of the reciprocals of all prime 
quadruplets, so called Brun’s constant for prime quadruplets, is 
approximately 0.87058.... 
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2.6.4. There exist also other “relative” primes. So, a cousin primes 
is a pair of prime numbers that differ by four. The first cousin primes 
are (3, 7), (7, 11), (13, 17), (19, 23), (87, 41), (48, 47), (67, 71), (79, 
83), (97, 101), (103, 107), ... (see sequences A023200 and A046132 
in the OEIS). 

The largest known cousin prime pair has 20008 digits and is (p, 
p +A) for 


p = 4111286921397 - 266420 + 1, 


It is known, that cousin primes have the same asymptotic density 
as twin primes. An analogy of Brun’s constant for twin primes is 
defined for cousin primes, with the initial term (3,7) omitted: 


Ba= (= + x) +---=1.1970449.... 
2.6.5. A sexy prime is a pair (p,p+6) of prime numbers that differ 
by six. The name “sexy prime” stems from the Latin word for six, 
Sen. 

The first sexy primes are (5, 11), (7, 13), (11, 17), (13, 19), (17, 
23), (23, 29), (31, 37), (37, 43), (41, 47), (47, 53), ... (see sequences 
A023201 and A046117 in the OEIS). 

The largest known pair of sexy primes (Kaiser, 2019) is (p,p +6) 
for 


p = (520461 - 2°°93' + 1) - (98569639289 
pando ort oT = By iT, 
It has 50539 digits. 


2.6.6. Like twin primes, sexy primes can be extended to larger con- 
stellations. Triplets of primes (p,p + 6,p + 12) such that p+ 18 is 
composite are called sexy prime triplets. 

The first sexy prime triplets are (7, 13, 19), (17, 23, 29), (31, 
37, 43), (47, 53, 59), (67, 73, 79), (97, 103, 109), (151, 157, 163), 
(167, 173, 179), (227, 233, 239), (257, 263, 269), ... (see sequences 
A046118, A046119, and A046120 in the OEIS). 
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The largest known sexy prime triplet (Lamprecht and Luhn, 2019) 
has 10602 digits; in it, 


p = 2683143625525 - 29°76 + 1. 


Since every fifth number of the form 6n +1 is divisible by 5, only 
one sexy prime quintuplet exists, namely, (5, 11, 17, 23, 29), and no 
larger sequences of sexy primes are possible. 

Some additional information see, for example, in [Buch09], 
[DeKo13], [HaWr79], [Prim20], [Sloa20], [Wiki20]. 


Prime gaps conjectures 


2.6.7. All problems, considered above, belong to a classical type of 
open problems in the Theory of prime numbers concerns prime gaps, 
i.e., the differences between consecutive primes. 

It is conjectured that there are infinitely many pairs of primes 
with difference 2; this is the twin prime conjecture. 

Prime gaps can be generalized to prime k-tuples, patterns in the 
differences between more than two prime numbers. Their infinitude 
and density are the subject of the first Hardy—Littlewood conjecture, 
which can be motivated by the heuristic that the prime numbers 
behave similarly to a random sequence of numbers with density given 
by the Prime number theorem. 

The fist Hardy-Littlewood conjecture is concerned with the distri- 
bution of prime constellations, including twin primes, in analogy to 
the Prime number theorem. In particular, if 72(2) denote the num- 
ber of primes p < x such that p+ 2 is also prime, and if the constant 
C2 is defined as 


1 
Co = II (1 7 i) = 0.6601618158... , 


p prime 
p23 


then a special case of the first Hardy-Littlewood conjecture is that 
x * dt 
The conjecture can be justified (but not proven) by assuming 


that Osh describes the density function of the prime distribution. 
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This assumption, which is suggested by the Prime number theorem, 
implies the twin prime conjecture, as shown in the formula for 72(x) 
above. 

The general first Hardy—Littlewood conjecture deals with prime 
k-tuples. 


2.6.8. The Polignac’s conjecture states more generally that 
e for every positive integer k, there are infinitely many pairs of 
consecutive primes that differ by 2k. 


2.6.9. Andrica’s conjecture, Brocard’s conjecture, Legendre’s conjec- 
ture, and Oppermann’s conjecture all suggest that the largest gaps 
between primes from 1 to n should be at most approximately /n, 
a result that is known to follow from the Riemann hypothesis, while 
the much stronger Cramér’s conjecture sets the largest gap size at 
O((logn)?). 

In fact, the Bertrand’s postulate states, that 

e for any integer n > 3, there always exists at least one prime 
number p with n <p < 2n— 2. 

A less restrictive formulation is: for every n > 1 there is always 
at least one prime p between n and 2n. 

This statement was first conjectured in 1845 by J. Bertrand, and 
was completely proved by P. Chebyshev in 1852; so the postulate is 
also called the Bertrand—Chebyshev theorem. 

It can also be stated as a relationship with a(x), where m() is 
the prime counting function (the number of primes less than or equal 
tera) 

n(x) —«(5) 21 forall ¢>2. 

The Prime number theorem implies that the number of primes up 

Ba 


log x? 
of primes up to 2x is asymptotically twice the number of primes up 


to x is roughly so if we replace x with 2x then we see the number 
to x, as the terms log 2” and log x are asymptotically equivalent. 
Therefore, the number of primes between n and 2n is roughly ia 
when n is large, and so in particular there are many more primes 
in this interval than are guaranteed by Bertrand’s Postulate. So, 
Bertrand’s postulate is comparatively weaker than the Prime number 
theorem. But the Prime number theorem is a deep theorem, while 
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Bertrand’s Postulate can be stated more memorably and proved more 
easily, and also makes precise claims about what happens for small 
values of n. 
The similar and still unsolved Legendre’s conjecture asks whether 
e for every n > 1 there is a prime p, such that n? < p< (n+1)?. 
Again we expect that there will be not just one but many primes 
between n? and (n+1)?, but in this case the Prime number theorem 
doesn’t help: the number of primes up to x? is asymptotic to aan 


while the number of primes up to (2 +1)? is asymptotic to mer 


which is asymptotic equal to the estimate on primes up to 2. 

So, unlike the previous case of x and 2” we don’t get a proof of 
Legendre’s conjecture even for all large n. 

If Legendre’s conjecture is true, the gap between any prime p and 
the next largest prime would always be at most on the order of \/p; 
in other words, the gaps are O(,/P). 

Three stronger conjectures, Andrica’s conjecture, Brocard’s con- 
jecture and Oppermann’s conjecture, imply that the gaps have the 
same magnitude. 

Andrica’s conjecture (named after D. Andrica) states that the 
inequality \/Pnyi — V/Pn < 1 holds for all n, where py is the n-th 
prime number. 

Brocard’s conjecture (named after H. Brocard) states that 

e there are at least four prime numbers between (pp)? and (pn+1)?, 
where py is the n-th prime number, for every n > 2. 

Note, that Legendre’s conjecture that there is a prime between 
consecutive integer squares directly implies that there are at least 
two primes between prime squares for p, > 3 since pr41 — Pn > 2. 

Oppermann’s conjecture is closely related to but stronger than 
Legendre’s conjecture, Andrica’s conjecture, and Brocard’s conjec- 
ture. It is named after Danish mathematician L. Oppermann, who 
announced it in 1877. 

The conjecture states that, 

e for every integer x > 1, there is at least one prime number 
between x(a —1) and x”, and at least another prime between x? and 
x(a +1). 
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It can also be phrased equivalently as stating that the prime 
counting function must take unequal values at the endpoints of each 
range. That is: 


n(x? — 2) < n(x?) <a(2?+2) for x >1. 


The end points of these two ranges are a square between two pronic 
numbers, with each of the pronic numbers being twice a pair trian- 
gular number. 

H. Cramér conjectured that the gaps are always much smaller, of 
the order (log p)?. If Cramér’s conjecture is true, Legendre’s conjec- 
ture would follow for all sufficiently large n. 

Cramér also proved that the Riemann hypothesis implies a weaker 
bound of O(,/plog p) on the size of the largest prime gaps. A coun- 
terexample near 10!® would require a prime gap fifty million times 
the size of the average gap. 

Note, that it is proven, that 

e for all sufficiently large n, there is a prime between the consec- 
utive cubes n° and (n+ 1). 

R.S. Baker, G. Harman and J. Pintz proved also (2001), that 

e there is a prime in the interval |x, x + O(x®)] for all large x. 

Some additional information see, for example, in [Broc76], 
[Broc85], [Buch09], [Dezal17], [McDa98], [McDa98a]. 


Goldbach’s conjecture 


2.6.10. One of the most known open problems in Number Theory 
is the Goldbach’s conjecture, which asserts that 

e every even integer n greater than 2 can be written as a sum of 
two primes. 

As of 2014, this conjecture has been verified for all numbers up 
ton =4-1038. 

However, some weaker statements have been proven. For exam- 
ple, the Vinogradov’s theorem says that 

e every sufficiently large odd integer can be written as a sum of 
three primes. 


94 Mersenne Numbers and Fermat Numbers 


The Chen’s theorem says that 

e every sufficiently large even number can be expressed as the sum 
of a prime and a semi-prime (the product of two primes). 

Also, it is proven, that 

© any even integer greater than 10 can be written as the sum of 
six primes. 

The history of this conjecture was started on 7 June 1742, when 
the German mathematician C. Goldbach wrote a letter to L. Euler; 
in the margin of his letter, he proposed the following conjecture: 
“Every integer greater than 2 can be written as the sum of three 
primes.” 

L. Euler replied in a letter, dated 30 June 1742, and reminded C. 
Goldbach of an earlier conversation, in which Goldbach had conjec- 
tured that “every positive even integer can be written as the sum of 
two primes.” 

Note, that C. Goldbach was following the now-abandoned conven- 
tion of considering 1 to be a prime number, so that a sum of units 
would indeed be a sum of primes. A modern version of the marginal 
conjecture is: 

e every integer greater than 5 can be written as a sum of three 
primes. 

And a modern version of Goldbach’s older conjecture of which 
L. Euler reminded him is: 

e every even integer greater than 2 can be written as a sum of two 
primes. 

It is known as the strong (or even, or binary) Goldbach’s conjec- 
ture. 

A weaker form of this statement, known as the weak (or odd, or 
ternary) Goldbach’s conjecture asserts that 

e very odd integer greater than 7 can be written as a sum of three 
odd primes. 

Note that the weak conjecture would be a corollary of the strong 
conjecture: if n — 3 is a sum of two primes, then n is a sum of three 
primes. But the converse implication and thus the strong Goldbach 
conjecture remain unproven. 
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A Goldbach number is defined a positive even integer that can 
be expressed as a sum of two odd primes. So, another form of the 
statement of Goldbach’s conjecture is that all even integers greater 
than 4 are Goldbach numbers. 

The expression of a given even number as a sum of two primes is 
called a Goldbach partition of that number. The following are exam- 
ples of Goldbach partitions for some even numbers: 


4=242; 6=34+3; 8=34+5; 10=3+7=5+45; ... 
.. 100 = 3 +97 = 11489 =17+83 =294+71 
= 41 +59 = 47453. 


The number of ways in which 2n can be written as the sum of two 
primes (for 1 starting at: 1) is: 0, 1, 1, 1, 2,.1, 2, 2, 2, 2, 3,3, 3, 2, 
99 4.4.0.3 .4.5 45.495 9 4.6 3:56.90. 5. 6, 5. 5, 7,4, 
5, 8, 5, 4, 9, 4, 5, 7, 3, 6, 8, 5, 6, 8 6, 7, 10, 6, 6, 12, 4, 5, 10, 3, ... 
(sequence A045917 in the OEIS). 

The proof of these properties and some additional information 
see, for example, in [Apos86], [Buch09], [Dick05], [Moze09], [Kara83], 
[Vino03}. 


Primes in some sequences 


2.6.11. In Number Theory, primes in arithmetic progression are any 
sequence of at least three prime numbers that are consecutive terms 
in an arithmetic progression. 

An example is the sequence of primes (3, 7,11), which is given by 
Qn =3+4n for 0<n< 2. 

According to the Green—Tao theorem (2004), 

e there exist arbitrarily long sequences of primes in arithmetic 
progression. 

Sometimes the phrase may also be used about primes which 
belong to an arithmetic progression which also contains compos- 
ite numbers. For example, it can be used about primes in an 
arithmetic progression of the form a-n+06, where a and b are 
coprime. According to Dirichlet’s theorem on arithmetic progressions 
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it contains infinitely many primes, but along with infinitely many 
composites. 

There are many open questions in this branch of the Theory of 
prime numbers. For example, 

e are there infinitely many sets of 8 consecutive primes in an 
arithmetic progression? 

Obviously, it is true if we omit the word “consecutive”. Other 
question: 

e is there an arithmetic progression of consecutive primes for any 
given length? 

For example, the arithmetic progression 251, 257, 263, 269 has 
length 4, while the largest known example has length 10. 

It is known, that n? — n+ 41 is prime for 0 < n < 40 (see 
Chapter 2, section 2.4). One of the open questions is: 

e are there infinitely many primes of this form? 

The same question can be applied to the polynomial n? — 79n + 
1601, which is prime for 0 < n < 79. 


2.6.12. As for factorials n! (n! is the product of all positive integers 
k <n) and primorials (n# is the product of all primes p < n), the 
following open questions exist: 


e are there infinitely many primes of the form n# +1? 


e are there infinitely many primes of the form n! +1? 


The proof of these properties and some additional information 
see, for example, in [Buch09], [ChFa07], [DeKo13], [Sier64]. 


Riemann hypothesis 


2.6.13. One of the most famous unsolved questions in Mathematics, 
dating from 1859, is the Riemann hypothesis. It was proposed by 
German mathematician B. Riemann and asks where the zeros of the 
Riemann zeta function ¢(s) are located. 

It is of great interest in Number Theory because it implies results 
about the distribution of prime numbers. Many mathematicians 
consider it to be the most important unsolved problem in pure Math- 
ematics (Bombieri, 2000). 


Prime numbers 97 


The Riemann zeta function ¢(s) is a function whose argument 
s = 0+ it may be any complex number other than 1, and whose 
values are also complex. In fact, it is an analytic function on the 
complex numbers, other than 1. 

For s = a+ it, 0 > 1, the Riemann zeta function is defined by 
the absolutely convergent infinite series 


err eee 
— Las 26 n 


L. Euler already considered this series in the 1730’s for real values 
2 
of s, in conjunction with his solution (S7°°, 4+ = 4) to the Basel 
problem. He also proved that 
1 1 1 1 1 1 
c() = T] l—-p-*  1—2-* 1-3-* 1—-5-* 1-7" 1-11-* 
pEeP 

where the infinite product extends over all prime numbers p. 

So, for complex numbers s = o + it with real part o greater than 
one ¢(s) equals both an infinite sum over all integers, and an infinite 
product over all prime numbers: 


“Ye == 


peP 


This equality between a sum and a product is called an Euler product. 
The Euler product can be derived from the fundamental Theorem of 
Arithmetic. It shows the close connection between the zeta function 
and the set of prime numbers. 

The function ¢(s) has zeros at the negative even integers; that is, 
¢(s) = 0 when s is one of —2,—4,—6,.... These zeros are called its 
trivial zeros. 

However, the negative even integers are not the only values for 
which the zeta function is equal to zero. The other ones are called 
non-trivial zeros. 

All of them belong to so called critical strip 0 < o < 1, consisting 
of the complex numbers s = o + it, where o is a real number from 
the interval (0,1). The Riemann hypothesis is concerned with exact 
location of these non-trivial zeros, and states that 
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e the real part o of every non-trivial zero of the Riemann zeta 
function is equal to t 

Thus, if the hypothesis is correct, all the non-trivial zeros lie on 
the critical line o = 5 consisting of the complex numbers s = s+ it. 

The original proof of the Prime number theorem was based on a 
weak form of this hypothesis, states that there are no zeros with real 
part equal to 1, although after other more elementary proofs have 
been found. 

In fact, the prime counting function can be expressed by Rie- 
mann’s explicit formula as a sum in which each term comes from 
one of the zeros of the zeta function; the main term of this sum is 
the logarithmic integral, and the remaining terms cause the sum to 
fluctuate above and below the main term. 

In this sense, the zeros control how regularly the prime numbers 
are distributed. If the Riemann hypothesis is true, these fluctuations 
will be small, and the asymptotic distribution of primes given by the 
Prime number theorem will also hold over much shorter intervals (of 
length about the square root of x for intervals near a number x. 

The Riemann hypothesis and some of its generalizations, along 
with the Goldbach’s conjecture and the twin prime conjecture, com- 
prise Hilbert’s eighth problem in David Hilbert’s list of 23 unsolved 
problems. 

It is also one of the Clay Mathematics Institute’s Millennium Prize 
Problems. 

There are several useful books on the Riemann hypothesis; For 
example, the book [MaSt15] gives mathematical introduction, while 
[Kara83], [KaVo92], [Ivic85] and [Titc87] are advanced monographs. 


Landau’s problems 


2.6.14. At the 1912 International Congress of Mathematicians, 
Edmund Landau listed four basic problems about prime numbers. 
These problems were characterised in his speech as “unattackable at 
the present state of Mathematics” and are now known as Landau’s 
problems. They are as follows. 
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Goldbach’s conjecture: can every even integer greater than 2 be 
written as the sum of two primes? 


Twin prime conjecture: are there infinitely many primes p such 
that p+ 2 is prime? 
Legendre’s conjecture: does there always exist at least one prime 


between consecutive perfect squares? 


Are there infinitely many primes p such that p — 1 is a perfect 
square? In other words: are there infinitely many primes of the 
form n? + 1? 


As of November 2020, all four problems are unresolved. 
For references, an additional information see, for example, 


[Guy94], [HaWr79], [John77], [Ingh32], [Ivic85], [Kara83], [Lagr70], 
{[Land09], [Lege30], [Wiki20]. 


Exercises 


1. 
2: 


Find first ten pairs of twin primes. 


Prove, that for any pair of twin primes (p,q) with q > p > 3 it 
holds p = —1(mod 6), and g = 1(mod 6). 


. Prove, that there are no prime triples of the form (p,p+2,p+4), 


ppt+2,pt+4eEP. 


. Represent any positive integer 4 < n < 100 as a sum of at most 


tree primes. How many such representations exist for each n? 


. Prove, that there are infinity many primes in the arithmetical 


progression ax — 1, where a = 2,4, 6. 


. What we can say about a number of primes in a given geometric 


progression? 


. Prove, that any square number $4(n) = n?, n = 1,2,3,... cannot 


to be a prime. Find a prime of the form 54(n) — 1. Find several 
prime of the form S4(n) — 1. 
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8. For first 100 positive integers, check, that there exist at least one 
prime between two consecutive perfect squares. 
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Mersenne numbers 


3.1 History of the question 


3.1.1. A Mersenne number is a positive integer of the form 
My = 2" -1, nEN. 


The first Mersenne numbers are 1, 3, 7, 15, 31, 63, 127, 255, 511, 
1023, 2047, ... (sequence A000225 in OEIS). 

For 2” — 1 to be prime, it is necessary that n itself be prime. 
By this reason, many authors require that the exponent n in the 
definition above be a prime. 

Mersenne numbers 2? —1 with prime p form the sequence 3, 7, 31, 
127, 2047, 8191, 131071, 524287, 8388607, 536870911, ... (sequence 
A001348 in OEIS). 

In fact, the exponents n which give Mersenne primes are 2, 3, 
5, 7, 18, 17, 19, 31, ... (sequence A000043 in the OEIS), and the 
resulting Mersenne primes are 3, 7, 31, 127, 8191, 131071, 524287, 
2147483647, ... (sequence A000668 in the OEIS). 

However, we will consider these numbers for any positive inte- 
ger n. 

This class of special numbers is of great interest because the 
Mersenne primes (prime Mersenne numbers) are among the oldest 
and most studied of all primes. 
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In fact, Mersenne primes are very rare: not all numbers of the 
form 2? — 1 with a prime p are primes; for example, 


gu _ 1 = 2047 = 23-89 


is not a prime number. 

It is proven, that for the 2610944 prime numbers p up to 43112609, 
the corresponding Mersenne numbers M, = 2? — 1 is prime for only 
47 of them. Today we know only 51 Mersenne primes. 

The numbers of the form 2” — 1 had been investigated long before 
the XVII-th century, when they got their name. 

In fact, they are closely connected with perfect numbers. 

Many ancient cultures were concerned with the relationship of a 
number with the sum of its divisors, often giving mystic interpreta- 
tions. Here we are concerned only with one such relationship. 

In Number Theory, a perfect number is a positive integer that is 
equal to the sum of its positive divisors, excluding the number itself, 
i.e., as the sum of its proper divisors. 

For instance, 6 has divisors 1, 2 and 3 (excluding itself), and 


1+2+3=6; 
12 has proper divisors 1, 2, 3, 4, and 6, and 
149434446 > 12; 
4 has proper divisors 1 and 2, and 
142<4. 


So, 6 is a perfect number; 12 is an abundant number, 4 is a deficient 
number. 

It is easy to check, that 6 is the first perfect number. 

The second perfect number is 28: 


28=14+24+4+7+14. 


The next two are 496 and 8128. 

Euclid proved that the number 2?-!(2? — 1) is an even perfect 
number whenever 2? — 1 is a prime; in fact, a Mersenne prime. Over 
a millennium after Euclid, Alhazen (circa 1000 AD) conjectured that 
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every even perfect number is of the form 2P-1(2? —1), where 2? —1 is 
prime, but he was not able to prove this result. It was not until the 
XVIU-th century that L. Euler proved that the formula 2?~'(2? — 
1), 2? — 1 € P, will yield all the even perfect numbers. Thus, each 
Mersenne prime generates one even perfect number, and vice versa. 
This result is known as the Fuclid—Euler theorem. 

In fact, the first four perfect numbers are generated by the formula 
2P-1(2P — 1), with p a prime number, as follows: 


for p= 2; 21/97 — 1) = 2.3 —6: 

for p= 3: 22/23 —1) ] 447 = 28; 

for p= 5: 24(2° — 1) = 16-31 = 496; 
for p= 7: 2°(27 — 1) = 64-127 = 8128. 


So the search for Mersenne primes is also the search for even 
perfect numbers. 

These first four perfect numbers, corresponding to p = 2,3,5 and 
7, were the only ones known to early Greek Mathematics. They were 
given in the Arithmetic of Nicomachus of Gerasa. 

Philo of Alexandria in his first-century book On the creation men- 
tioned perfect numbers, claiming that the world was created in 6 days 
and the moon orbits in 28 days because 6 and 28 are perfect. 

Philo is followed by Origen, and by Didymus the Blind, who added 
the observation that there are only four perfect numbers that are less 
than 10000. 

The fifth perfect number 33550336 corresponding to p = 13 
was discovered by Regiomontanus, a mathematician, astrologer and 
astronomer of the German Renaissance (XV-th century). 

In the XVI-th century, the German scientist Scheibel found two 
more perfect numbers, 8589869056 and 137438691328. They corre- 
spond to p= 17 and p= 19. 

Many writers felt that the numbers of the form 2” — 1 were prime 
for all primes n, but in 1536 Hudalricus Regius showed that 2!'—1 = 
2047 was not prime; it is 23 - 89. 

By 1603 Pietro Cataldi had correctly verified that 2!” — 1 and 
2'9 _ 1 were both prime, but then incorrectly stated 2” — 1 was also 
prime for 23, 29,31 and 37. 
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In 1640 Pierre Fermat showed that P. Cataldi was wrong about 23 
and 37; then L. Euler in 1732 showed that P. Cataldi was also wrong 
about 29. Sometime later L. Euler (1750) showed that Cataldi’s 
assertion about 31 was correct. 


3.1.2. But finally the numbers of the form 2” — 1 were named after 
Marin Mersenne (1588-1648), a French monk and mathematician, 
whose works touched a wide variety of fields. 

M. Mersenne was born in Sarthe, France. He was educated at the 
Jesuit College of La Fléche. 

Between 1614 and 1618, he taught Theology and Philosophy 
at Nevers, but he returned to Paris and settled at the convent of 
L’Annonciade in 1620. There he studied Mathematics and met with 
René Descartes, Etienne Pascal, Pierre Petit, Gilles de Roberval, 
Thomas Hobbes, and Nicolas-Claude Fabri de Peiresc. He corre- 
sponded with Giovanni Doni, Jacques Alexandre Le Tenneur, Con- 
stantijn Huygens, Galileo Galilei, and other scholars in Italy, England 
and the Dutch Republic. 

In 1635 he set up the informal Académie Parisienne (Academia 
Parisiensis), which had nearly 140 correspondents, including astro- 
nomers and philosophers as well as mathematicians. He was not 
afraid to cause disputes among his learned friends in order to com- 
pare their views, notable among which were disputes between R. 
Descartes and P. de Fermat and J. de Beaugrand. In 1635 Mersenne 
met with Tommaso Campanella. In 1643-1644 Mersenne also cor- 
responded with the German Socinian Marcin Ruar concerning the 
Copernican ideas of Pierre Gassendi. 

M. Mersenne discussed numbers of the form 2” — 1 in his work 
Cogita physico mathematics (1644) and stated conjectures about the 
number’s ocurrence. 

One of his most famous conjectures is called the Mersenne con- 
jecture: 

e 2” — 1 is prime for n = 2, 3, 5, 7, 18, 17, 19, 31, 67, 127, 257, 
and is composite for all other integers 2 <n < 257. 

It is obvious, that M. Mersenne could not have tested all of 
these numbers. It took three centuries and several mathematical 
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discoveries (such as the Lucas-Lehmer test), before the exponents 
in Mersenne’s conjecture had been completely checked. 

It was determined that M. Mersenne had made five errors (three 
primes, for n = 61, 89,107, omitted, two composites, for n = 67, 257, 
listed), and the correct list is: 


n = 2,3,5,7, 13,17, 19, 31,61,89,107 and 127. 


Primality of the number 2147483647 = 2°! — 1 was proved by L. 
Euler (1750). 

Primality of an 19-digit number 2305843009213693951 = 2°! — 1 
was proved by Russian mathematician I. Pervushin (1883). 

R.E. Powers showed that an 27-digit number 2°9 — 1 is prime 
(1911), as well as an 33-digit number 2!0” — 1 (1913). 

E. Lukas (1876) showed that 2!27—1 € P. This 39-digit Mersenne 
is the largest prime number open in a precomputer era. 

The next result was obtained only in 1952 by R.M. Robinson, who 
with the help of computers managed to prove primality of Mersenne 
numbers 2°7! — 1 (157 decimal digits), 2°°” — 1 (183 decimal digits), 
2!279 _ 1 (386 decimal digits), 220% — 1 (664 decimal digits), and 
2°81 _ 1 (687 decimal digits). 

So, the Mersenne’s conjecture was not completely correct, but his 
name is still attached to the numbers of the form 2” — 1. 

Where did M. Mersenne get his list’? Perhaps we find a hint in 
this quote. In a letter to Tanner E. Lucas stated that M. Mersenne 
(1644, 1647) implied that a necessary and sufficient condition that 

e 2?—1 be a prime is that p be a prime of one of the forms 2?” +1, 
gan 48 pert 7, 

Tanner expressed his belief, and noted the sufficient condition 
would be false if 2°” — 1 is composite. 

There is also a missing restriction on the size of the prime because 


23 — 1 is prime, but 3 is not one of these forms. 

So there seems to be a belief that the exponents p of Mersenne 
primes have a special form. 

If you check the numbers under 257, you will get Mersenne’s list 
(except 3) plus the prime 61. 
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Sadly, the conditions quoted above are neither necessary nor 
sufficient. The Mersenne numbers M, are composite for the fol- 
lowing primes p: 257 = 2841, 1021 = 2!°—3, 67 = 2643, and 
8191 = 2!3 — 1. So, none of the “sufficient” conditions hold. 

Also, M, is prime for p = 89, but 89 cannot be written in any of 
the listed forms. 


3.1.3. P.T. Bateman, J.L. Selfridge and Jr.S.S5. Wagstaff made 
(1989) the New Mersenne Conjecture. It is thus: 

e Let p be any odd positive integer. If two of the following condi- 
tions hold, then so does the third: 


1. p=2* +1 or p=4" +3: 
2. 2? —1 is a prime (a Mersenne prime); 


a a is a prime (a Wagstaff prime). 


This conjecture has been verified for all primes p less than 100000, 
and for all 51 known Mersenne primes. Some feel that “conjecture” 
is too strong of a word for the above and that perhaps this is even 
another case of Guy’s law of small numbers. 


3.1.4. The Mersenne numbers give us most of prime number records. 

In 1811 P. Barlow wrote in his text Theory of Numbers that 
29°23! _ 1) “... is the greatest perfect number that will be discov- 
ered; for as they are merely curious, without being useful, it is not 
likely that any person will attempt to find one beyond it.” Obvi- 
ously no one in the late 1800’s had any idea of the power of modern 
computers. 

After the 23-rd Mersenne prime was found at the University of 
Illinois (Gilles, 1963), the Mathematics department was so proud 
that the chair, Dr. Bateman, had their postage meter changed to 


“11213 


stamp — 1 is prime” on each envelope. This was used until 


the four color theorem was proved in 1976. 
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The 25-th Mersenne prime was found by high-school students 
Laura Nickel and Landon Curt Noll (1978), who, though they had 
little understanding of the Mathematics involved, used Lucas’ simple 
test on the local university’s mainframe. 

D. Slowinski, who works for Cray computers, has written a ver- 
sion of the Lucas test that he has convinced many Cray labs around 
the world to run in their spare time. D. Slowinski does not search 
for record primes systematically. In fact, looking at the table of 
Mersenne primes you see he missed the 29-th prime but found the 
30-th (1983) and 31-st (1985). 

W. Colquitt and L. Welsh worked to fill in the gaps and found 
the 29-th Mersenne prime in 1988. 

Starting in late 1995, E. G. Woltman, gathered up the dis- 
parate databases and combined them into one. Then he placed 
this database, and a free, highly optimized program for search 
for Mersenne primes onto the web. This began the Great Internet 
Mersenne Prime Search (GIMPS), which has now found the largest 
known Mersenne primes, combining the efforts of dozens of experts 
and thousands of amateurs. 

Since 1997, all newly found Mersenne primes have been discovered 
by the Great Internet Mersenne Prime Search. 

In late 1997, S. Kurowski (and others) established PrimeNet to 
automate the selection of ranges and reporting of results for GIMPS. 

In 1999 (Hajratwala, Woltman, Kurowski et al.), the first prime 
with more than 1000000 decimal digits (in fact, more than 2000000) 
was obtained. It is the 38-th Mersenne prime, Mgg72593; it has 
2098960 decimal digits. 

Let a megaprime be a prime number with at least one million 
decimal digits, one can say, that the first megaprime, Mgg72593, was 
found in 1999. 

In 2018 (Laroche et al.), the last known (in fact, the 51-th known) 
Mersenne prime, Mg2589933, was obtained. It has 24862048 decimal 
digits. 

So, as of 2020, 51 Mersenne primes are known. In December 2020, 
a major milestone in the GIMPS project was passed after all expo- 
nents below 100 million were checked at least once. 
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List of known Mersenne primes 


Number of 
digits in M, Year Discoverer 


anonymous 
Cataldi 
Cataldi 
Euler 
Pervushin 
Powers 
107 Powers 
127 Lucas 
521 157 Robinson 
607 183 Robinson 
1279 386 Robinson 
2203 664 Robinson 
2281 687 Robinson 
3217 969 Riesel 
4253 1281 Hurwitz 
4423 1332 Hurwitz 
9689 2917 Gillies 
9941 2993 Gillies 
11213 3376 Gillies 
19937 6002 Tuckerman 
21701 6533 Noll and Nickel 
23209 6987 Noll 
44497 13395 Nelson and Slowinski 
86243 25962 Slowinski 
110503 33265 Colquitt and Welsh 
132049 39751 Slowinski 
216091 65050 Slowinski 
756839 227832 Slowinski, Gage et al. 
859433 258716 Slowinski and Gage 
1257787 378632 Slowinski and Gage 
1398269 420921 Armengaud, Woltman et al. 
2976221 895932 Spence, Woltman et al. 
3021377 909526 Clarkson, Woltman, 
Kurowski et al. 
6972593 2098960 Hajratwala, Woltman, 
Kurowski et al. 
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(Continued) 


Number of 
| |g | agen ae, [-veus| sree | 
39 13466917 | 4053946 Cameron, Woltman, 
Kurowski et al. 
20996011 | 6320430 Shafer, Woltman, 
Kurowski et al. 
24036583 | 7235733 Findley, Woltman, 
Kurowski et al. 
25964951 | 7816230 Nowak, Woltman, 
Kurowski et al. 
30402457 | 9152052 Cooper, Boone, Woltman, 
Kurowski et al. 
32582657 | 9808358 Cooper, Boone, Woltman, 
Kurowski et al. 
37156667 | 11185272 Elvenich, Woltman, 
Kurowski et al. 
42643801 | 12837064 Strindmo, Woltman, 
Kurowski et al. 
43112609 | 12978189 Smith, Woltman, 
Kurowski et al. 
57885161 | 17425170 Cooper, Woltman, 
Kurowski et al. 
74207281 | 22338618 Cooper, Woltman, Kurowski, 
Blosser et al. 
77232917 | 23249425 Pace, Woltman, Kurowski, 
Blosser et al. 
82589933 | 24862048 Laroche, Woltman, Blosser et al. 


In the table above, we put question marks instead of a number 
for the last of the Mersenne primes because it will not be known if 
there are other Mersenne’s in between these until a check and double 
check has been completed by GIMPS. See the GIMPS Status Page 
for more information. Not all smaller exponents have been tested. 

For additional information see, for example, [DeKo18], [Dick05], 
[Ore48], [Salo90], [Sier64], [Prim20], [Wiki20]. 


3.2 Elementary properties of 
Mersenne numbers 


In this section, we give the large list of simplest properties of 
Mersenne numbers. All of them can be proven using elementary 
properties of divisibility of integers. 
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Elementary conditions of primality of 
Mersenne numbers 


3.2.1. First of all, consider elementary properties of Mersenne num- 
bers, connected with their primality. 

It is easy to see, that a number of the form 2” — 1 can be a prime 
only if n is a prime: 

e for a positive integer n, if 2" —1¢€ P, thenne P. 
In fact, consider n € N. If n = 1, one has 2? — 1 = 1; it is not 


a prime. If n is composite, one can find positive integers a, b, such 
that n =a-b,andl<a<b<n. Then 


2” —1 = 2% —1 = (2%)'-1 = ((2")-1)-K, KEN. 


So, the number 2” — 1 has a positive integer divisor 2*—1. Asa <n, 
it holds 2* — 1 < 2” —1. It means, that 2% — 1 is a proper divisor of 
2” — 1; so, 2” — 1 is composite. 
As the consequence, we get the following elementary fact: 
e for a positive integer n, ifn € S, then 2” —-1ES. 
So, it is proven, that 


e there are infinite many composite Mersenne numbers. 
However, there exist prime numbers p, such that 2? — 1 is com- 
posite. The first such number is 11: 


My, = 2'' —1 = 1027 = 23-89. 


The next are 23, 29, 37, 41, 43, 53, 59, 67, 71, 73, ... (sequence 
A054723 in the OEIS). 
In order to find some prime divisors of Mersenne numbers, note, 
that any odd prime number divides at least one Mersenne number: 
e given prime number p > 3, it holds p|Mp-1. 
Due to the Fermat’s little theorem: as gcd(2,p) = 1 for odd 
prime p, it holds 


2P-' =1(mod p), or Mp1 =0(mod p). 


Moreover, any odd prime number divides infinity many Mersenne 
numbers: 
e given prime number p > 3, it holds P\Mp-1)k for anyk EN. 
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Indeed, for such p it holds 2?~' = 1(mod p); therefore, for any 
positive integer k we get 2?—))* = 1(mod p), and PIM p—1)k- 


Last decimal digits of Mersenne numbers 


3.2.2. Consider now possible reminders of Mersenne numbers mod- 
ulo 10. It will give us the information about last digit of the Mersenne 
number /,,. 

In fact, the last digit of a Fermat number can be any odd digit 
except 9: 


e forn>1, n=Al, it holds M, = 5(mod 10), i.e., the last digit of 
My, is 5; 

e forn>1,n=41+1, it holds M, = 1(mod 10), 1.e., the last digit 
of My, is 1; 

e forn>1,n=41+ 2, it holds M, = 3(mod 10), 1.e., the last digit 
of My is 3; 


e forn>2,n=41 +483, it holds F,, = 7(mod 10), t.e., the last digit 
of My, is 7. 


The reader can easy check this facts, noting that 
QA k es (27) OF — 1 a6! 12” —1 = 6-2” — 1 Gnod 10): 


as 6-2°—1 = 5(mod 10), 6-21—1 = 1(mod 10), 6-22—1 = 3(mod 10), 
and 6-2? —1=7(mod 10), the result holds. 
Any odd prime number p is congruent to 1 or 3 modulo 4. So, 
given odd prime p, the last digit of a Mersenne number M, is 1 or 7: 
e given prime number p > 3, it holds M, = 1,7(mod 10), i.e., the 
last digit of Mp 1s 1 or 7. 
In particular, it is proven, that 


e the last digit of a Mersenne prime greater 3 is 1 or 7. 


Recurrent relations for Mersenne numbers 


3.2.3. There exists a simple recurrent relation for the Mersenne 
numbers: 
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e For any positive integer n, it holds Mp4, = 2M, + 1, with 
M,=1. 
In fact, 


0M, 1 = 202" 1) 41 = Oe" = 2) 1S 1 = a 


Now it is easy to check, that there exists the following linear 
recurrent relation with constant coefficients of the second order for 
the Mersenne numbers: 

e for any positive integer n, it holds Mpni2 = 3Mm41—2Mn, with 
M, =1,M2 =3. 

In fact, Mni1 = 2M, +1. So, Mni2 = 2Mni1 +1. Then 


Mn+2 = Mn+1 = 2Mm+1 = 2M, and Mn+2 _ 3Mm4+1 = 2M,,. 


Divisibility properties of Mersenne 
numbers 


3.2.4. The results, represented above, allow us to obtain some very 
important properties of divisibility of Mersenne primes. 

It is well-known, that any Mersenne number divides infinitely 
many other Mersenne numbers: 

e for positive integers n,m, it holds M,|Minn.- 


It is obviously, that 


mh (= Ot) =O" )K, KEN: 


So, we get M,,|Mmn- 
Moreover, it is easy to see, that a difference of any two Mersenne 
numbers is divisible by a third Mersenne number: 


e for positive integers n,m, m>n, it holds Myn—n|(Mm — Mn). 
In fact, Min—n|(Mm — Mn), as form > n, we have 


Mm — Mn = 2 — 2” = 2"(2™-" — 1) = 2”Mn_n- 


The next divisibility property of Mersenne numbers is connected 
with the integer division algorithm: 

e if form=nq+tr, wherem,n,q,r €N, it holds d|M,, and d|M,, 
then it holds d|M,. 
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In fact, if d| Mm and d|M,, then d|M,, and d|Mng. As d|Mm 
and d|Mngq, then 


d|(Mm — Mng) = 2°7(2™ 4 — 1). 


Obviously, any divisor of (odd) Mersenne number is odd; so, 
gcd(d, 2) = 1, and, hence, d|My—ng, i-e., d|M,. 

The last result allows us to obtain a very important property 
of greatest common divisor of Mersenne numbers. In fact, a greatest 
common divisor of Mersenne numbers is always a Mersenne number. 
More exactly, 

e for any positive integers m,n it holds gcd(Mp,Mn) = 
Mged(m,n)- 

In order to prove this property, consider the Euclidean algo- 


rithm for m and n. Without loss of generality, let m > n. Then one 
has 


m=ng +11, 
n=7192 +12, 
ry = 7293 + 73, 


sees 


Ts—2 =Ts-19s Ts, 


Ts—1 = 1sds; 


where 0 < rg < --- < 171 <n. Then gcd(m,n) = rz. As r.|m and 
rs|n, then, using the first property of divisibility of Mersenne num- 
bers, we get M,,|M,, and M,,|Mm. So, M;, is an common divisor 
of the numbers M,, and M,,,. 

On the other hand, let d|M,, and d|M,,. Then, using the second 
proprety of divisibility of Mersenne numbers for the first equality 
m=nq +11 of the algorithm, we get that d|M,,. On a similar way, 
it holds d|M,., ..., d|M,,. So, any common divisor d of M,, and M,, 
divides their common divisor M,,. It gives, that M,, = Mogca(m,n) 
is the greatest common divisor of the Mersenne numbers M,, and 
My. 
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From the last property we will get two important consequences. 
First, it is a statement about the relationship between the divisibility 
of Mersenne numbers and the divisibility of their indexes: 

e for any positive integers m,n, m > n, it holds M,|M,, if and 
only if n|m. 

In fact, if n|m, then gcd(m,n) = n, and gcd(M,,Mp) = 
cd(m,n) = Mn. So, Mn|Mn. 

On the other hand, if M,|Mi,, it holds gcd(Mn, Mm) = Mn. So, 
Mn = Mogca(njm)- We get, that n = gcd(n,m); hence, n|m. 

Secondly, it is a very important statement about coprime Merse- 
nne numbers: 

e for any positive integers m,n, it holds gcd(Mp, Mm) = 1 if and 
only if gcd(m,n) = 1. 

This fact is now obvious: gcd(Mn,Mm) = 1 if and only if 
Mgcd(n,jm) = 1, if and only if gcd(m,n) = 1. 


Mg 


This property of Mersenne numbers allows us to give one more 
proof of infiniteness of the set of prime numbers: 

e there are infinity many prime numbers. 

Indeed, consider the set {M2, M3,..., Mp,,,...} of all Mersenne 
numbers with prime indexes pj = 2, po = 3, .... For each M,,, 
denote by q the smallest prime divisor of M,,. On this way, we get 
a set {q1,42,--->4i,---} of prime numbers: q; = 3, q2 = 7, g3 = 31, 
etc. 

For i # j, it holds pj # p;, and hence gcd(p;,p;) = 1; so, 
gced(My,, Mp,) = 1, and q; # qj. Therefore, all elements of the set 
{@1,92,---)Gi,-.-} are different. If the set P of primes is finite, say, 
P = {p1,p2,---,Pr}, it should coincides with the set {q1, q2,-.-, Qk }- 
But p; = 2, while all numbers q; are odd; a contradiction. It proves, 


that the set P of primes is infinite. 


Other elemantary properties of Mersenne 
numbers 
3.2.5. Consider now some elementary properties of Mersenne num- 


bers, which allow to find connections between M,, and other classes 
of special numbers. 


Mersenne numbers 115 


For example, it is easy to see, that M, cannot be represented as 
a non-trivial perfect square: 

e for any n> 2, it holds M, #4 k?, where k EN. 
In fact, if 2” — 1 = k?, then k should be odd. 

In this case, k2 = 1(mod4), while 2” — 1 = —1(mod 4) for any 
n > 2; a contradiction. 

So, M,, # k? for n > 2. It means, that 

e any Mersenne number, greater 1, cannot be a square number. 

Using the same arguments, we can prove that M,, 4 k* for n > 2. 
It means, that 


e any Mersenne number greater 1 cannot be a biquadratic number. 
In fact, it can be proven, that M,, cannot be any non-trivial power: 
e for any n > 2, it holds M, #4 k°, where k,s © N, and s > 2. 
As we noted above, if 2” — 1 = k*, then k should be odd. 

If s is even, then k* = 1(mod8), and 2” = k*§ +1 = 2(4t4+ 1), a 
contradiction. 

If s is odd, then 2” = k* + 1 = (K+ 1)T, where T is odd, and, 
therefore, is equal to 1. Then 2” = k+1, i.e., s = 1, a contradiction. 


It is easy to check, that for n = 1,2,4,12 the number M,, can be 
represented as ils aa where k EN. 

The numbers of the form heey k €N, are called triangular. So, 
we got the connection between Mersenne numbers and triangular 
numbers: M, = S3(1), Mz = S3(2), Ma = S3(4), Mio = S3(90), 
where $3(k) = ae is the k-th triangular number. 

In fact, it is possible to prove that M,, is a triangle number only 
for these four cases: 

eM, = Ker) only for n = 1,2,4,12. 

The problem of finding all triangular Mersenne numbers is 
equivalent to the problem of finding all positive integer solutions 
of the Ramanujan-Nagell equation 2” — 7 = x”. The solutions of this 
equation in positive integers n and x exist just when n = 3, 4, 5, 7 
and 15 (sequence A060728 in the OEIS) with corresponding x = 1, 
3, 5, 11, and 181 (sequence A038198 in the OEIS), as was conjec- 
tured by an Indian mathematician S. Ramanujan and proved by a 
Norwegian mathematician T. Nagell. 
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In this case, if the number M, = 2” — 1 is triangular, then the 
values of v are just those of n — 3, so that the triangular Mersenne 
numbers are 1, 3, 15, 4095 (see sequence A076046 in the OEIS) and 
no more. 

The numbers 0, 1, 3, 15, 4095, which are the only non-negative 
integers which have simultaneously the form wer) u = 0,1,2,..., 
and the form 2° — 1, v = 0,1,2,..., are called Ramanujan-Nagell 
numbers. 


3.2.6. It is easy to prove, that ifp is a prime, then Mersenne number 
Mp, is prime or Fermat pseudoprime to the base 2 (see Chapter 2, 
Section 2.3): 

e ifp © P, then 2-1 = 1(mod M,). 
In fact, let p be a prime, and M, = 2? — 1 be a Mersenne 


number with prime index p. 

If M, is prime, the congruence 2”°—! = 1(mod M,) holds due to 
the Fermat’s little theorem. 

If M, is composite, then p is an odd prime. By the Fermat’s little 
theorem, 2?~' = 1(mod p), and, hence, 


M,-1 

= = 2P-! _1=0(mod p). 
So, Meo = kp for some positive integer k. As for any positive integer 
k; it holds 

gkp 1 — (2? —1)K, withsome K EN, 
we get 
i Mp-1 
M, = 2 —1\(2* —1) =2-3- -1 


It is equivalent to say that or = 1(mod M,), which implies that 
2Me—! = 1(mod M,). 
Similarly, it holds (see Chapter 2, Section 2.3) that 
e all composite divisors of prime-exponent Mersenne numbers M, 


are strong pseudoprimes to the base 2. 
On the other hand, 


e a Mersenne prime cannot be a Wieferich prime. 
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Remember, that a Wieferich prime is a prime number p such 
that p? divides 2?-! — 1. 

So, we are going to show that if p = 24 — 1 is a Mersenne prime, 
then the congruence 2?~' = 1(mod p”) does not hold. 

By the Fermat’s little theorem, 2?~' = 1(mod p). As by defi- 
nition, p = 27 — 1, it holds 27 = 1(mod p), and hence, q|(p — 1). 
Therefore, one can write p— 1 = qk, where k CN, k > 2. 

If the congruence 2?-! = 1(mod p?) is satisfied, then p?|(27* — 1), 


and p| al. Therefore, using that p = 24 — 1, we obtain 
a 2 k-1 
a i a G4 oes QR = — (mod 27 — 1). 


Hence, 2% — 1|k, and, therefore, k > 27 — 1. This leads to p—1 = 
qk > q(24 — 1) = qp, which is impossible. 

The additional proofs and some other additional information see, 
for example, in [Dezal7], [Dezal8], [DeKo13], [Nage51], [Nage61], 
[Rama00], [Sier64]. 


Exercises 


1. Check the following congruences: 


(a) M, = 1(mod 2) forn>1; (c) M, = 7(mod 8) for n > 3; 
(b) M, = 3(mod 4) forn > 2; (d) My, = 15(mod 16) for n > 4. 


. Find the smallest prime divisor for any M,, 2 <n < 20. 

: (Check, that.M,,| Mira; % =1,2,3;4, m= 1,2, 3: 

. Check, that Mn—m|(Mn — Mm), m,n = 1, 2,3, 4,5, 6, 7. 

. Check, that ged(Mn,Mm) = Mgca(njm); ™,n = 1, 2,3, 4, 5, 6, 7. 


nD oO FF WO WD 


. Prove the following properties: 


(a) 3|M, } 2|n; (c) 7|M, = 3|n; 
(b) 5|Mn © 4ln; (d) 11|Mn = 10|n; 
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(e) 13|M, © 12|n; (g) 19|M, = 18|n; 
(f) 17|M, = 8|n; (h) 23|M, = 11|n. 


7. Prove, that in the binary numeral system any Mersenne number 
is represented by a repunit, i.e., contains only the digit 1. 


8. Prove, that any binary polindromic prime (see Chapter 2, Section 
2.5) is a Mersenne prime. 


9. Prove, that any odd positive integer n divides infinitely many 
Mersenne numbers. 


3.3 Mersenne primes: Prime 
divisors of Mersenne numbers 


The principal problem studied in connection with Mersenne numbers 
is that of their primality (factorization). 

The most elementary and obvious method for finding the factors 
of a given number n is to test it for divisibility by primes less than 
/n; but if the given number is a large prime or has only large prime 
factors, the corresponding work is almost prohibitive. 

One of the earliest used improvements on this method consists of 
determining certain properties from the prime factors of the numbers 
in consideration and then testing with only those primes which have 
this property. 


Properties of prime divisors of Mersenne 
numbers 


3.3.1. If we consider the set of Mersenne numbers in context of their 
primality, we are going to study only Mersenne numbers M, with odd 
prime indexes p: otherwise the problem becomes trivial. So, in this 
section we are going to prove, that all prime divisors of Mersenne 
numbers with prime indexes are of the special form. 

In the previous section we have proven, that any odd prime p 
divides Mersenne number M,_;. In context of primality problem the 
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result is almost trivial: as p—1 is even, the number M,_1 is composite 
for any p > 5. But what we can say about the number bo? In fact, 
there exists the following divisibility property: 

e ifqge P, q=+1(mod8), then q|Mo-1. 
It is easy to see, that for any odd prime gq it holds q = 
+1(mod8), or ¢ = +3(mod8). If ¢ = +1(mod8), we get, by the 
properties of the Legendre symbol (see Chapter 1, Section 1.5), that 
()=1. 

So, by the Fuler’s criterion it holds 


and q|Myg-1. 
2 


For example, for g = 23, one has a = 11, and 23|M),; for 
q = 47, one has _ = 23, and 47|M3. 

On the other hand, one can start from n = 11; for n = 11 one 
has q = 2n+ 1 = 23, and 23|/Mj,. Similarly, for n = 23 one has 
q = 2p + 1 = 47, and 47|Mo3. 

So, we have proved the following fact: 

e forp € P, p=—1(mod 4), if ¢ = 2p+1 is prime, then M, is 
composite. 

For p = —1(mod 4), we get 2p + 1 = +1(mod 8), so, in the case 
of primality of g = 2p — 1, q|M,, and so M, is composite. 

In particular, if p = 11, 23,83, 131,179, 191, 239, 251, then M, is 
divisible by 23, 47, 167, 263, 359, 383, 479, 503, respectively. 


3.3.2. One can show, that any possible prime divisor of a given 
Mersenne number M, with odd prime index p, has the form 2pk + 1: 
e if g,p € P\{2}, and q|Mp, then q = 2pk+1 for some k EN. 
Indeed, if gq € P, and q|Mp, we have due to the Fermat’s little 

theorem, that 


2? = 1(mod4q), 


i.e., the multiplicative order ord, 2 of 2 modulo q divides p: ordy 2\p. 
As ord, 2 #1, it holds ord, 2 = p. 
Therefore, by the properties of multiplicative order, we get that 
p\(q — 1), ie., g = 1(modp). 
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Obviously, ¢g = 1(mod 2). So, ¢g = 1(modp), q = 1(mod 2), and we 
obtain that gq = 1(mod 2p), i.e, q= 2pk+1,k EN. 


3.3.3. It is easy to show, that any prime divisor q of a Mersenne 
number M, with odd prime index p is equal to +1 modulo 8: 

e if g,p € P\{2}, and q|M,, then q = £1(mod8). 
Consider gq € P, q|Mp. As p € P\{2}, then p is odd, i-e., 
p= 2k+1. Hence, g|(2?*++ — 1), or g|(2(2*)? — 1), ie., 


qd (2(2*2)? = x”) 


for any integer x. 

As gcd(2",q) = 1, there exist integers x9, yo, such that 2*ar9 — 
qyo = I. 

Therefore, 2x9 = 1+ qyo. It means that 


q| (2(1 + ayo)? — x6) , 
q| ((2(qyo)” + 4qyo) + (2 — 28) . 


As q|(2(qyo)* + 4ayo), we get that q|(2 — 29). 
Consider the decomposition of 2 into a continued fraction (see 
Chapter 1, Section 1.7): 


XO 
a = (a0, 41, -.-, 4s] = ao + 


Let [ao, a1, ..., ax] = ae. Then 


1l=Q9 301 <0o<++<G,=¥9. 


As q > 1, there exists an index n, such that Q? < q < Q? 41: Then 


x P, 
q Qn eae 


Therefore, 
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and we get that 
2g < —2Q), < (toQn — 9Pn)” — 205, 
= (19 — 2)Q2 +qM <q—2Q%, <4. 
As q|(2 — 72), we have that (x2 — 2)Q? + qM is divisible by gq, i.e., 
(zoQn — dPn)* — 2Q2 is divisible by g. But 
—2¢ < (@0Qn — ¢Pn)” — 2Q7 <4. 


So, (xoQn — Pn)” — 2Q? can only take values 0 or —q. 
In the first case we obtain a contradiction, as we have 2 = ??, 
aldo al 


where t = is a rational number. 


In the second case, we get the representation 
q=2a*—y’, where t=Qn, y= Z0Qn = @Pn- 
In this situation, y should be odd: y = 2k + 1. Therefore, 
y? = 4k? + 4k +1 = 4k(k +1) +1 = 1(mod8). 


If x is odd, then 2x? = 2(mod8), and q = 1(mod8). 
If x is even, then 2x” = 0(mod8), and q = —1(mod8). 


3.3.4. Using the information above, we can now get a representation 
of any possible prime divisor of the Mersenne number M, with odd 
prime index p: 

e ifa,p © P\{2}, q|Mp, and p=4t #1, then g € {8pk +1, 8pk + 


1 Dot. 
By the two last properties, we have that q = 2pt +1, and 
q= +1(mod8). 


1. If ¢g = 2pt +1, and gq = 1(mod8), then 
2pt = 0(mod 8), pt = 0(mod 4), t = 0(mod 4). 


So, we get that gq = 8pk +1. 
2. If gq = 2pt +1, and q = —1(mod8), then 


2pt = —2(mod 8), pt = —1(mod 4). 


If p = 1(mod 4), then t = —1(mod 4), and q = 8pk + 1 — 2p. 
Otherwise, p = —1(mod 4), t = 1(mod4), and q = 8pk+1+4 2p. 
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L. Euler (1771) proved that M3, is prime by testing prime num- 
bers of the form 248n + 1, 248n + 63 below 46339 as possible factors 
of M3, (there are only 84 such primes). 

But even reduced set of possible factors grows too large as M, 
increases. 

See [Dezal7], [DeKo13], [Dick05], [Step01]. 


Mersenne numbers and Sophie Germain 
primes 


3.3.5. The first property of prime divisors of a Mersenne number 
with prime index allow as to say, that 

e if there exist infinitely many primes p for which q = 2p+1 is a 
prime, then there exist infinite many primes p such that M, € S. 

A prime number p is called a Sophie Germain prime if 2p + 1 is 
also prime. These numbers are named after a French mathematician 
Marie-Sophie Germain. 

The number 2p + 1 associated with a Sophie Germain prime p is 
called a safe prime. 

For example, 11 is a Sophie Germain prime because it is a prime 
and 2-11+1 = 23 is also a prime; in turn, 23 is a Sophie Germain 
prime because it is a prime and 2-23 + 1 = 47 is also a prime. 

The first Sophie Germain primes are 2, 3, 5, 11, 23, 29, 41, 53, 
83, 89, ... (sequence A005384 in the OEIS). 

Hence, the first safe primes are 5, 7, 11, 23, 47, 59, 83, 107, 167, 
179, ... (sequence A005385 in the OEIS). 

So, we get a property of compositeness of Mersenne numbers with 
prime index p = —1(mod 4): 

e let pe P, p=—I1(mod4), p> 3. Then My € S if p is a Sophie 
Germain prime. 

Sophie Germain primes and safe primes have applications in 
Public-key Cryptography and primality testing. It has been conjec- 
tured that there are infinitely many Sophie Germain primes, but this 
conjecture remains unproven. 

Two distributed computing projects, PrimeGrid and Twin Prime 
Search, include searches for large Sophie Germain primes. 
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The largest known Sophie Germain prime (as of 2020) is 137211 
941292195 - 2171960 _ 4 (Jarai et al., 2006). It has 51780 digits. 

Some additional information see, for example, in [Buch09], 
[Dezal17], [DeKo18], [Dick05], [Ehrm67], [Sier64], [Step01]. 


Exercises 


1. Find the set of all possible prime divisors of M,, p = 7, 13, 19. 
Using this information, prove, that M, is prime. 


2. Find the set of all possible prime divisors of M,, p = 11, 23, 29, 
37. Using this information, prove, that M, is composite. 

3. Find the first ten primes, which are not Sophie Germain primes. 

4. Prove, that any safe prime q > 7 divides 3-1, 


5. Let p be a Sophie Germain prime, p > 3. Prove, that p = 
2(mod 3). 


6. Let q be a safe prime, g > 7. Prove, that q = 3(mod 4), q = 
5(mod 6), gq = 11(mod 12). 


7. Find several sequences {p, 2p + 1,2(2p + 1) + 1,...} in which all 
of the numbers are primes (such sequence is called a Cunningham 
chain of the first kind). 


3.4 Mersenne primes: 
Lucas-Lehmer test 


The other method for testing primality of Mersenne numbers is the 
Lucas-Lehmer test. 


History of the question 


3.4.1. The theory for this test was initiated by E. Lucas in the late 
1870’s. E. Lucas studied Fibonacci numbers, i.e., the positive integers 
Un, such that uy = 1, ug = 1, and 


Un+2 = Un + Un+1 
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for any n € N. While studying Fibonacci numbers, E. Lucas discov- 
ered the following fact: 
e if n = +3(mod10) and n is a proper divisor of Uni (1.e., 


N\Unti, andn fu; fori <n+1), then n is a prime; ifn = +1(mod 10) 
and n is a proper divisor of Un—1 (i.e., N|Un-1, and nfu; fori < 
n—1), then n is a prime. 


Using this approach, E. Lucas proved primality of Mj27 in 1876. 
He wrote: “...I1 have proved that number A = 2!%" — 1 is prime. 
Indeed, the number A is of the form 10k — 3, and I have verified that 
ux is never divisible by A for k = 2”, except for n = 127.” 

So, the primality of the Mersenne number 


Myo7 = 2!" — 1 = 170141183460...715884105727 


was proven in 1876. It was the last case of “hand” checking of the 
primality of a Mersenne number. 

After E. Lucas, originated the theory, D.H. Lehmer, 1930, simpli- 
fied the primality test of Lucas. 

Using a new version of the test, D.H. Lehmer managed to prove, 
that Mo57 is a composite number. 

See [Dezal7], [Luca75], [Hogg69], [Voro61], [Wiki20]. 


Proof of the theorem 


3.4.2. In this section we consider the proof of the Lucas-Lehmer 
primality test. 


Theorem (Lucas-Lehmer test). A number Mp, p being an odd 
prime, is a prime if and only if it is a divisor of the (p — 1)-th term 
of the sequence $1, S2,...,Sp—1, where S; = 4, and Sp41 = S? — 2. 
Leto=1+15, and d=1— 7%, ie, o+6=2, and ab =—2. 
Let u, = wae and v, = a"™ + 6". 


I. It is easy to check, that there exist the following identities: 


1. QUpts = UpUs + UpUs3 4. UpUp = Uap} 
+1 . 2 1 . 
2. Dg — ys = (—2 Past 5. us + (—2)"*! = nap; 


3. Ups + 12Upts = 2Up+s} 6. v2 —12u? = (—2)"*?. 
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For example, 


ee b” Ss _ b§ 
UrUs + Ups = — 5 (a° + 6°) + SF (a" +b") 
QaTts — 2b"+8 + a™b® — ba + ab” — a™b® 
- a—b 
r+s __ prts 
= gt — QUr+s- 
a—b 


II. It holds, that for a given prime p > 3, we have the following 
congruences: 


Up = (=) (modp), and Vp = 2(mod p). 


In fact, 


Eien ens 


AG (ya raf, )eate+a())9y) 
= (7) +3(2) 4-4 ?) a a at - (2) (mod p), 


as binomial coefficients (2?) = 0(modp) for any k € [1,p—1]. On the 
same way, 


v= (eA Ova 


=242(2) (v8) +-+2(,? 1) (v8) 7 =20nod 7) 


III. Let p be a prime, and p > 3. Let plu, but p does not divides 
uy with r < w. Then the number w = w(p) is called rang of p. 

We can prove, that plu, if and only if w|r, where p is a prime, 
p> 3, and w is the rang of p. 

In fact, let X, = {r : ur = 0(mod p)}. Using the first and second 
identities of I, we obtain the following fact: 


if ur = O0(modp), and us = O(modp), then uyr+s = O(mod p). 
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If w is the least number from the set X,, and r € X,, then 
consecutive subtractions give, that r — kw = 0, ie., wr. 

IV. We are going to prove, that w < p+1, where p is a prime, 
p> 3, and w is the rang of p. 

For a proof of this fact, it is sufficiently to show, that p|up,—1up+1. 

Take in the first and second identities of II the values r = p, and 
s=l. 

Then, as uy = 1, and vj = 2, we obtain, that 


2Up+1 = Up t+ 2uUp, and 4tp_1 = Up — 2Up. 
Therefore one has, using IT, that 


Sty dei = ue — dus, = 4—4(+1)? = 0(mod p). 


V. Let prove now, that vor = 22" Sh, ie., M,|S, if and only if 
Mp|vox- 

In fact, for k = 1, one has that vg = 8 = 25). Going from k to 
k +1, we obtain, using the fifth identity of I with r = 2", that 


Vokes = Ue, — 2°41 = (27° gy? — 27°41 = 9?" (G2 — 2) = 2" Spay, 


VI. Consider the proof of the first proposition of the theorem: if 
M, € P, then M,|Sp-1- 
Let M, € P. It is sufficiently to show, that 


M, Upp-1 = UMp+1- 
plv2 Pp 
2 


Mp+1 


Using the fifth identity of I with r = —) 


, we obtain that 


; Mp-1 
UMp+l = UMp+1 — 4-272. 
2 


As M, € P, and as for prime p > 3 we have M, = 2?—1 = —1(mod 8), 


, ; Mp-1 
then (x75) = 118,23 1(modp). Therefore, 


a 
UM,t+1 = UMp+1 — A(mod p). 
2 


On the other hand, using the third identity of I with r = M, and 
s = 1, we obtain, that 


2UM,+1 = 2Um, + 12um, 
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(as vy = 2, and u; = 1). Now, noting that M, = —1(mod 4) and 
M, = 1(mod 3), i.e., that 


(i) (=) 


we obtain using IT that 


3 
UM,+1 = Um, + 6um, =2+6 (7) = 2-6 =-—-4(mod M,). 
Pp 


Therefore, 


ey = 0(mod M,). 
2 


VII. Consider the proof of the second proposition of the theorem: 
if Mn|Sn-1, then M,, is a prime number. 

Let M,,|Sn—1, i-e., Mn|von-1. Let p|M,. As for k > 1 any S; = 
—1(mod3), then p > 3. Let w be the rang of p. Using the fourth 
identity of I with r = 2”~!, we obtain that 


M,,|wan — Ugn-1U9n-1. 


Therefore, one has that p|ugn, i-e., by IIT, that w|2”. 
It is easy to see that w = 2”. In fact, if w < 2", then p|ugn-1, and 
using the last identity of I with r = 2”~!, we obtain that 


m—1 
p| (v2.1 — 12u2,-1) — (3) x 


2 


a contradiction. 

But, by IV, we have that w < p+ 1. Therefore, one has that 
p>w-1=2"—1= My, where p is a prime dividing M,, i.e., we 
obtain that p= My. 

See [Dezal7], [Luca75], [Hogg69], [Voro61], [Wiki20]. 


Practical algorithms of computation 


3.4.3. The Lucas—Lehmer test works as follows. 

Let M, = 2? — 1 be a Mersenne number to test with p, an odd 
prime. (The primality of p can be efficiently checked with a simple 
algorithm like trial division since p is exponentially smaller than M,.) 
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Define a sequence {9;}: 9; = 4, and S;4, = 9? — 2 for any positive 
integer 7. 

The first terms of this sequence are 4, 14, 194, 37634, 1416317954, 
2005956546822746114, ... (sequence A003010 in the OEIS). 

Then M, is prime if and only if 

Sp-1 = 0(mod M,). 

The number S,—; modulo M, is called the Lucas—Lehmer residue 
of p. 

For example, the Mersenne number M3 = 2? — 1 = 7 is prime, as 
S, =4, and Sp = 42 -2 = 14 = 0(mod 7). 

The Mersenne number M; = 2° — 1 = 31 is prime, as S; = 4, 
So = 44 —2 = 14(mod 31); S3 = 147 — 2 = 8(mod 31); S54 =8? -2= 
O(mod 31). 

On the other hand, in order to check the primality of My, = 
2't _ 1 = 2047, we obtain the sequence $j,...,5;9 modulo 2047: 
5S; = 4(mod 2047); Sp = 42 — 2 = 14(mod 2047); S3 = 142-2= 
194(mod 2047); S, = 1942 — 2 = 788(mod 2047); Ss; = 7887 — 
2 = 701(mod 2047); Sg = 7017 — 2 = 119(mod 2047); S7 = 
119? — 2 = 1877(mod 2047); Sg = 18772 — 2 = 240(mod 2047); 
Sq = 240? — 2 = 282(mod 2047); S19 = 282? — 2 = 1736(mod 2047). 
So, Sig 4 O(mod 2047), and, hence, M1; id composite. 

In the Lucas-Lehmer test, starting values S; other than 4 are 
possible. In fact, the possible starting values for S; are 4, 10, 52, 724, 
970, 10084, 95050, 140452, 1956244, 9313930, ... (sequence A018844 
in the OEIS). 

The Lucas-Lehmer residue calculated with these alternative start- 


ing values will still be zero if M, is a Mersenne prime. However, the 
terms of the sequence will be different and a non-zero Lucas-Lehmer 
residue for composite M, will have a different numerical value from 
the non-zero value calculated when S$) = 4. 

Starting values like 4 and 10 are universal, that is, they are valid 
for all (or nearly all) p. In fact, there are infinitely many additional 
universal starting values. 

However, some other starting values are only valid for a subset 
of all possible p. For example, So = 3 can be used if p = 3(mod 4). 
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This starting value was often used in the era of hand computation, 
including by E. Lucas in proving primality of M97. 


3.4.4. The Lucas-Lehmer test happens to be ideally suited for binary 
computers, as the computation of S; does not involve division and 
can be done using only multiplication (rotation) and addition, which 
binary computers do quickly. 

The sequence S,, is computed modulo M, = 2? — 1 to save time. 
Taking each S; modulo M,, is easy in binary, too, because Mp is a 
string of the unities in binary. 

After E. Lucas, the next larger Mersenne prime was discov- 
ered in 1952 by Raphael M. Robinson with computer assistance. 
It was 


Ms21 = 686479766013...291115057151. 


Today the Lucas—Lehmer test is the primality test used by the Great 
Internet Mersenne Prime Search (GIMPS) to locate large primes. 
This search has been successful in locating many of the largest primes 
known to date. 


3.4.5. Since they are prime numbers, Mersenne primes are divisible 
only by 1 and by themselves. 

However, not all Mersenne numbers with prime indexes are 
Mersenne primes, and the composite Mersenne numbers may be fac- 
tored non-trivially. 

Mersenne numbers are very good test cases for the special number 
field sieve algorithm, so often the largest number factorized with this 
algorithm has been a Mersenne number. As of 2020, My193 = 2!!98—1 
is the record-holder, having been factored with a variant of the special 
number field sieve that allows the factorization of several numbers 
at once. 

On the other hand, as of 2020, the Mersenne number Mj977 = 


277 _ 1 is the smallest composite Mersenne number with no known 


factors; it has no prime factors below 2°”. 
The number of factors for the first 500 Mersenne numbers can be 


found at sequence A046800 in the OEIS. The first few elements of 
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this sequence are 0, 0, 1, 1, 2, 1, 2, 1, 3, 2, 3, 2, 4, 1, 3, 3, 4, 1, 4, 1, 


The other proofs of the Lucas-Lehmer theorem and some addi- 


tional information see, for example, in [Buch09], |Cohn65], [DeKo13], 
[DeKo18], [Prim20], [Wiki20]. 


Exercises 
1. Prove, that up + uy + ug +--+ + Un = Unqe — 1. 
2. Prove, that uy + ug +--+ + Uan—1 = Uan. 
3. Prove, that ug + ug +++: + Uan = Uan4i — 1. 
4. Prove, that ur + us foeee ft uz = Un * Un+1- 
5. Let a= dave B= Lv. prove the Binet’s formula un = oF, 
neN. 
6. Let a= 2+ V3, and 6 = 2 — V3; prove that S41 = a2 + pe 
for any 7 > 0. 
7. Prove the Lucas-Lehmer theorem, using the numbers @ = 2+ V3, 
and. b= 24/5, 
8. Prove the primality of M7 = 2‘—1 = 127 using the Lucas-Lehmer 
primality test. 
9. Prove the primality of Mj3 = 2!° — 1 = 8191 using the Lucas- 
Lehmer primality test. 
10. Prove the primality of Mj7 = 2!’ — 1 = 131071 using the Lucas- 
Lehmer primality test. 
11. Prove the primality of M3 = 2? —1=7 using the Lucas-Lehmer 
primality test with S; = 10; with S; = 52. 
12. Prove the primality of Ms = 2°? — 1 = 31 using the Lucas- 


Lehmer primality test with S,; = 10; prove the primality of 
M7 = 2° — 1 = 127 using the Lucas-Lehmer primality test with 
S; = 10. 
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3.5 Mersenne numbers in the 
family of special numbers 


Mersenne primes and perfect numbers 


3.5.1. Mersenne numbers are connected to a very old mathematical 
problem. 

Consider so called perfect numbers: they are positive integers, 
which are equal to the sum of their proper divisors (i.e., the pos- 
itive integer divisors different from the number itself). 

The first perfect numbers (sequence A000396 in OEIS) are 


6, 28, 496, 8128, 33550336, 8589869056, 137438691328, 
2305843008139952128, 2658455991569831744654692615953842176, 
191561942608236107294793378084303638130997321548169216, ... . 


The Euclid—Euler theorem states that 

e an even natural number is perfect if and only if n = 2k-1(2*—1), 
where 2* —1e€ P. 

In other words, it gives an one-to-one relationship between even 
perfect numbers and Mersenne primes; each Mersenne prime gener- 
ates one even perfect number, and vice versa: 

e the n-th even perfect number has the form n = 2?-!M,, where 
M, is the n-th Mersenne prime. 

So, we obtain a new even perfect number if and only if we obtain 
a new Mersenne prime. 

As for odd perfect numbers, mathematicians cannot find one. If 
odd perfect numbers exist, they should be very large and very special. 

For example, if there exists one, then: 


e it is a perfect square times an odd power of a single prime; 


e it is divisible by at least eight primes and has at least 75 prime 
factors (not necessarily distinct) with at least 9 distinct; 


e it has at least 300 decimal digits; 


e it has a prime divisor greater that 1020, etc. 
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As of 2020, there exist 51 known Mersenne prime. It means, that 
there exists 51 known (even) perfect numbers. The four smallest per- 
fect numbers are 


= 242? = 1) = Bs Ma DRS 27 1) So 
496 = 2*(2° — 1) = 24. Ms; 8128 = 26(2? — 1) — 2°. Mz. 
The four biggest known perfect numbers are 


957885160 (957885161 _ 1) _ 9257885160 , ay... 4 (34850339 digits): 

974207280 (974207281 _ 4) _ 974207280 . 4, 7981 (44677235. digits); 

977232916 (977232917 _ 1) _. 977282916 . Nf 1 9,9917(46498850 digits); 
( ( 


982589932 82589933 _ 1) _ 982589932 . 17,,5-.49,0 (49724095 digits). 


Some additional information see, for example, in [Buch09], 
[DeKo13], [Dezal17], [Deza18], [Dick05]. 


Mersenne numbers and figurate numbers 


3.5.2. There are some interesting connextions between Mersenne 
numbers ans figurate numbers. 

It was shown before, that M, = KEY) only forn = 1,2,4,12. As 
any triangular number 


S3(n) =1+24+3+---+n,neEN, 


has the form $3(n) = nin) we can say, that 

e a Mersenne number M,, is a triangular number S3(k) if and 
only if n = 1,2,4, 12. 

In fact, My = S3(1), My = S3(2), M, = S3(4), My = S'3(90). 

We have proven, that M,, 4 k? for any positive integer k > 1. As 
any square number 


Sa(n) =14+3+4+5---+(2n-1),neEN, 


has the form $4(n) = n?, we can say, that 
e there is no Mersenne number M,, n > 1, which is a square 
number. 
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We have proven also, that M, 4# k*® for any positive integers 
k and s, such that k,s > 1. But for s = 3 we obtain from k* a 
cubic number, an 3-dimensional generalization of the notion of square 
numbers. 

For s = 4, the formula k* gives us so-called polytope numbers, an 
4-dimensional generalization of the 2-dimensional notion of square 
numbers and 3-dimensional notion of cubic numbers. 

In general, the formula &* gives us s-dimensional s-polytope num- 
bers, an s-dimensional generalization of the 2-dimensional notion of 
square numbers and 3-dimensional notion of cubic numbers. So, we 
can say, that 

e there is no Mersenne number M,, n > 1, which is a cubic 
number, a polytope number and, in general, an s-polytope number, 
sEN,s>3. 

See for some additional information [DeDel2], [Nage61], 
[Rama00], [Wiki20]. 


Mersenne numbers and Pascal’s triangle 


3.5.3. It is obviously, that 
e the sum of all entries of the first n rows of Pascal’s triangle is 
equal to n-th Mersenne number My. 


In fact, it is well-known that the sum of all elements of the 


i-th row of Pascal’s triangle is 2’, i = 0,1,2,3,.... Then the sum 
of all elements of the first n rows of Pascal’s triangle is equal to 
204 gt4...4 97-1 — 9” _ 1, That concludes the proof. 


3.5.4. The Mersenne numbers arise also in the Sierpinski shive, given 
by the representation of Pascal’s triangle modulo 2. It was proven 
in Chapter 2, Section 2.5, that, for given prime p, the p-th row of 
Pascal’s triangle is divisible by p. 

It means, that in the p-th row of Pascal’s triangle, if p is a prime 
number, all the terms except the unities are multiples of p. 

So, for any Mersenne prime M,, we get the following property: 

e given Mersenne prime M,, the M,-th row of the Pascal’s trian- 
gle is divisible by Mp. 
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In particular, the third row 
1,3,3,1 
is divisible by Mz = 2? — 1 = 3, the 7-th row 
1, 7, 21, 35, 35, 21, 7,1 


is divisible by M3 = 2? — 1 = 7, etc. 

Considering Pascal’s triangle modulo 2, we can find in this con- 
struction all even perfect numbers. In fact, the n-th row of Pascal’s 
triangle is divisible by 2 if and only if n = 2". In this case all 2" — 1 
inner entries of the row are even. So, exactly 2° — 2 central entries of 
the next (2* + 1)-th row will be even; exactly 2* — 3 central entries 
of the (2* + 2)-th row will be even, ... , exactly 1 central element of 
the (2*+1 — 2)-th row will be even. On this way, we obtain in the 
Pascal’s triangle modulo 2 a black subtriangle, which contains 


(= 1)9" 
2 


elements. So, for Mersenne prime M,, the number of the elements in 


pote Oru S =F OF) 


the corresponding black “even subtriangle” will be a perfect number. 
Some additional information see, for example, in [Bond93}, 
[Buch09], [DeKo13], [Deza17], [Deza18], [Uspe76], [Wiki20]. 


Double Mersenne numbers 


3.5.5. A double Mersenne number is a Mersenne number of the form 
My,, = 2?'-1-1, neEN. 


The first few double Mersenne numbers are My, = 1, My, = 
M3 = 7, Mu, = M7 = 127, Mu, = Mis = 32767 (sequence A077586 
in the OEIS). 

A double Mersenne number that is prime is called a double 
Mersenne prime. 

Since a Mersenne number M,, can be prime only if n is prime, a 
double Mersenne number Mj, can be prime only if Mp is prime. 

The first values of p for which M, is a prime, are p = 
2,3,5,7,13,17,19,31. Of these, My, is known to be prime for p = 2, 
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3,5, 7; for p= 13, 17,19, and 31, My, is composite, and its explicit 
factors have been found. 

If another double Mersenne prime will be ever found, it would 
almost certainly be the largest known prime number. 


3.5.6. There exists another interesting subsequence of Mersenne 
numbers. 

Remind (see Chapter 2, Section 2.5), that a Woodall number W,, 
is a positive integer of the form 


Wr=n-2”-1, nEN. 


The first few Woodall numbers are 1, 7, 23, 63, 159, 383, 895, 2047, 
4607, 10239, ... (sequence A003261 in the OEIS). 

It is easy to check, that for a positive integer m, 

e the Woodall number Wom may be prime only if 2™-+m is prime. 

It means, that a Woodall prime Wm should coincide with a 
Mersenne prime Momim. As of 2020, the only known primes that 
are both Woodall primes and Mersenne primes are W2 = M3 = 7, 
and W512 = Msa1. 

Some additional information see, for example, in [Dezal8], 
[Sier64], [Prim20], [Wiki20]. 


Mersenne numbers, Carol numbers and 
Kynéa numbers 


3.5.7. A Carol number is an integer of the form 


ON) =" —2""" 1, HEN. 


An equivalent formula is 
CN(n) = (2” — 1)? —2, n EN. 


The first few Carol numbers are —1, 7, 47, 223, 959, 3967, 16127, 
65023, 261119, 1046527, ... (sequence A093112 in OEIS). 

These numbers were first encountered by C. Emmanuel in 1994, 
who consequently named them after a friend, Carol G. Kirnon. 


136 Mersenne Numbers and Fermat Numbers 


For n > 2, the binary representation of the n-th Carol number is 
n—2 consecutive unities, a single zero in the middle, and n+ 1 more 
consecutive unities, or to put it algebraically, 


2n 
CN(n)= SS) att. 
i=1ieén+2 
So, for example, 47 is 101111 in binary, while 223 is 11011111 in 
binary, etc. 
The difference between the n-th Mersenne number and the n-th 


Carol number is 2”*!: 


M, =—CN(n) = 2°" = Mg £1. 


Starting with 7, every third Carol number is a multiple of 7. Thus, 
for a Carol number C'N(n) to also be a prime number, its index n 
cannot be of the form 3t + 2 for a positive integer t. 

The first few Carol numbers that are also primes are 7, 47, 223, 
3967, 16127, 1073676287, 68718952447, 274876858367, ... (sequence 
A091516 in the OEIS). 

As of 2020, the largest known Carol number that is also a prime 
is the Carol number for n = 695631. It has 418812 digits. 

It was found by M. Rodenkirch in 2016 using the programs 
CKSieve and PrimeFormGW. In fact, it is the 44-th Carol prime. 


3.5.8. A Kynéa number is an positive integer of the form 


KN(n)=4" +2"! —1, neEN. 
An equivalent formula is 
KN(n) = (2" +1)? —2, n EN. 


So, a Kynéa number is the n-th power of 4 plus the (n + 1)-th 
Mersenne number: 


KN(n) = 4+ Mn4i = Mnsi + Mon +1. 


The first few Kynéa numbers are 7, 23, 79, 287, 1087, 4223, 16639, 
66047, 263167, 1050623, ... (sequence A093069 in the OEIS). 
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The binary representation of the n-th Kynéa number is a single 
leading unity, followed by n — 1 consecutive zeros, followed by n+ 1 
consecutive unities, or, to put it algebraically: 


n 
KN(n)=2" +502. 
i=0 


So, for example, 23 is 10111 in binary, 79 is 1001111 in binary, etc. 
The difference between the n-th Kynéa number and the n-th Carol 
number is the (n + 2)-th power of two: 


KN(n) — CN(n) = 2"? = Maso +1. 


Starting with 7, every third Kynéa number is a multiple of 7. Thus, 
for a Kynéa number to also be a prime number, its index n cannot 
be of the form 3¢ + 1 for a positive integer t. 

The first few Kynéa numbers that are also prime are 7, 
23, 79, 1087, 66047, 263167, 6785407, 1073807359, 17180131327, 
68720001023, ...(sequence A091514 in the OEIS). 

As of 2006, the largest known Kynéa number that is also a prime 
is the Kynéa number K N (281621). Approximately 


K N(281621) = 5.455289117190661 - 10'°9°°?, 


It was found by C. Emmanuel in 2005, using k-Sieve from Phil 
Comody and OpenPFGW. This is the 46-th Kynéa prime. 


3.5.9. Like Carol and Kynéa numbers, Mersenne numbers have very 
special binary representation; in fact, 
e in binary, the n-th Mersenne number consists from n—1 unities: 


n—-1 
M, = 2" —1=2% 142977 4..-42 415 5°52, 
1=0 


It means, that any Mersenne number is a repunit in binary; so, in 
binary it gives a simplest example of palindromic number. 

Moreover, any Mersenne prime gives a binary palindromic 
prime. Remind (see Chapter 2, Section 2.5), that the sequence of 
binary palindromic primes begins (in binary) from 11, 101, 111, 
10001, 11111, 1001001, 1101011, 1111111, 100000001, 100111001, ... 
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(sequence A117697 in the OEIS) and contains all Mersenne primes 
and all Fermat primes. 

As for permutable primes (see Chapter 2, Section 2.5), in base 2 
only repunits can be permutable primes, because any 0 permuted to 
the last place results in an even number. Therefore, 

e the base 2 permutable primes are the only Mersenne primes. 


3.5.10. The simplest version of generalized Mersenne primes can be 
obtained by consideration of prime numbers of the form f(2”), where 
f(x) is a low-degree polynomial with small integer coefficients. 

An example is 2®* — 23% + 1; in this case, n = 32, and f(x) = 
z* at 1, 

Another example is 2!°? — 264 — 1; in this case, n = 64, and 
f(g) =22 —a2—-1. 

By this approach, the Kynéa primes and the Carol primes can be 
consider as examples of generated Mersenne primes, with the poly- 


nomials f(z) = x7 + 22 —1. 
Some additional information see, for example, in [Dezal7], 
[DeKo13], [Wiki20]. 


Generalized Mersenne numbers 


3.5.11. It is also natural to try to generalize primes of the form 2"—1 
to primes of the form b” — 1 for b # 2. However, b” — 1 is always 
divisible by b— 1, so unless the latter is a unit, the former is not a 
prime. 

But we can regard a ring of “integers” on complex numbers 
instead of real numbers, like Gaussian integers and FEisenstein 
integers. 

If we regard the ring (Z[i],+,-) of Gaussian integers, 


Z|i] = {a+ bi | a,b € Z}, where i? = —1, 
we get the cases b = 1+7, and b = 1—12, and can ask for which n the 


number (1 +7)” — 1 is a Gaussian prime which will then be called a 
Gaussian Mersenne prime. 
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In fact, (1 +7)” —1 is a Gaussian prime for the n = 2, 3, 5, 7, 11, 
19, 29, 47, 73, 79, ... (sequence A057429 in the OEIS). 

Like the sequence of exponents for usual Mersenne primes, this 
sequence contains only (rational) prime numbers. As for all Gaus- 
sian primes, the norms (that is, squares of absolute values) of these 
numbers are rational primes 5, 13, 41, 113, 2118, 525313, 536903681, 
140737471578113, ... (sequence A182300 in the OEIS). 

We can also regard the ring (Z[w],+,-) of Eisenstein integers, 


—1+iv3. 

9 ’ 
here we get the cases b = 1+w, and b = 1-—vw. So, we can ask for 
what n the number (1 + w)” — 1 is an Eisenstein prime which will 
then be called an Eisenstein Mersenne prime. 

In fact, (1+w)”" —1 is an Eisenstein prime for the n = 2, 5, 7, 11, 
17, 19, 79, 163, 193, 239, ... (sequence A066408 in the OEIS). The 
norms (that is, squares of absolute values) of these Eisenstein primes 
are (rational) primes: 7, 271, 2269, 176419, 129159847, 1162320517, 

. (sequence A066413 in the OEIS). 


Z|w] = {a+ bw | a,b € Z}, where w = 


3.5.12. The other way to deal with the fact that b” — 1 is always 
divisible by b — 1, it is to simply take out this factor and ask which 
values of n make 


b” — 1 
M,,(b) = —— 
be prime. 
Least n such that M,,(b) = a is prime are (starting with b = 2, 


with 0 if no such n exists) are 2, 3, 2, 3, 2, 5, 3, 0, 2, 17, ... (sequence 
A084740 in the OEIS). 

If we take b = 10, we get n = 2, 19, 23, 317, 1031, 49081, 86453, 
109297, 270343, ... (sequence A004023 in the OEIS), corresponding 
to primes 


11, 2222111111111111111, 11111111111111111111111,... 


(sequence AQ04022 in the OEIS). These primes are called repunit 
primes. 
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3.5.13. Another sets of generalized Mersenne numbers can be con- 
structed using the formula 


where a and 0 are coprime integers, such that a > 1, and -a <b <a. 

For example, if (a,b) = (3,2), the least n such that M,,(3,2) = 
ae is prime are 2, 3, 5, 17, 29, 31, 53, 59, 101, 277, 647, 1061, 2381, 
2833, 3613, 3853, 3929, 5297, 7417, 90217, ... (sequence A057468 in 
the OEIS); if (a,b) = (10,3), the least n such that M,,(10,3) = “="" 
is prime are 2, 3, 5, 37, 599, 38393, 51431, ... (sequence A128026 in 
the OEIS); for (a,b) = (8,1), the number M,,(8, 1) = “=? is prime 
(in fact, 73) only for n = 3. 

Some additional information see, for example, in [Buch09]j, 
[CoGu96], [Dezal17], [DeKo13], [Wiki20]. 


Exercises 


1. Check the equality M,, = S3(k) for all n,k € {1,2,3,4,5, 6,7, 
8,9, 10}. 


2. Check the equality M, = S4(k) for all n,k € {1,2,3,4,5,6, 7, 
8,9, 10}. 


3. Check the equality M, = S5(k) for all n,k € {1,2,3,4,5,6, 7, 
8,9, 10}. 


4. Find all Mersenne numbers less than 1000, which are centered 
triangular numbers, i.e., represent triangles with a dot in the 
center and all other dots surrounding the center in successive 
triangular layers. 


5. Find all Mersenne numbers less than 1000, which are pentagonal 
numbers; centered pentagonal numbers. 


6. Find first five Mersenne primes in the Pascal’s triangle. Can we 
find in the Pascal’s triangle any Mersenne number? 


7. Prove, that starting with 7, every third Carol number is a mul- 
tiple of 7. 
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8. Prove, that starting with 7, every third Kynéa number is a mul- 
tiple of 7. 


9. Find first three generalized Mersenne primes of the form 
M, (a,b) = <=" for (a,b) = (3,1); for (a,b) = (3,—1); for 
(a,b) = (4,3); for (a,b) = (4, —3). 


10. Check, that there is only one generalized Mersenne prime of the 


form M,,(a,b) = =" for (a,b) = (4,1); for (a,b) = (8,1); for 


(a,b) = (8,—1); for (a, 6) = (9, 4). 


3.6 Open problems 


Many fundamental questions about Mersenne primes remain unre- 
solved. It is not even known whether the set of Mersenne primes 
is finite or infinite. It is also not known whether infinitely many 
Mersenne numbers with prime exponents are composite. 

In this section we consider some most important unsolved prob- 
lems and conjectures of the Theory of Mersenne numbers. 


Infiniteness of the set of Mersenne primes 


3.6.1. The most important open problem of the Theory of Mersenne 
numbers is represented by the following question: 

e are there infinitely many Mersenne primes? 

Equivalently we could ask: 

e are there infinitely many even perfect numbers? 

The answer is probably “yes”. In fact, consider the Prime num- 
ber theorem (1896, independently by Hadamard and de la Vallée 
Poussin): 


It means, that 


too x/log x 
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So, by the Prime number theorem, the n-th prime number is approx- 
imatively equal to nlogn (more exactly, cnInn < py, < Cnlnn, 
where C > c > 0 are some positive absolute constants). Then we 
can prove that the probability of a “random” number n being prime 
is at most we for some positive absolute constant A. 

Easy to see, that 


A A A C 


_—$$— — ee a 5 
logM, log2"” nlog2 nn 


where C = a is an absolute constant. Summing over all positive 
integers we get the following estimation: 


2 igs M, > digg SP Bei = x nr oe n 


n=1 n=1| 


In other words, it is proven, that 5° is greater than a diver- 


oo A 
n=1 log Mn 


°° _, + (harmonic series); so, it seems likely that there are 


gent sum )7", = 
infinitely many Mersenne primes. 

However, our reason cannot be used as a proof of infiniteness of 
the set of Mersenne primes, since the Mersenne numbers are not 
“random”. 

For the proof of the Prime number theorem and for some addi- 
tional information see, for example, [Deza17], [Ingh32], [Kara83], 
[(Titc87]. 


Lenstra-Pomerance-Wagstaff and Gillies’ 
conjectures 


3.6.2. Lenstra—Pomerance-Wagstaff conjecture states that there is 
an infinite number of Mersenne primes; more precisely, that 

e the number of Mersenne primes less than x is asymptotically 
approximated by 


e’ - logs logs a, 


where y is the Euler—Mascheroni constant. 
In other words, the number of Mersenne primes with a given expo- 
nent p less than x is asymptotically e7 - logs x. 
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This means that there should on average be about e7 - log, 10 © 
5.92 primes p of a given number of decimal digits such that M, is 
prime. The conjecture is fairly accurate for the first 40 Mersenne 
primes, but between 220000000 and 285000000 there are at least 12, 
rather than the expected number which is around 3.7. 

More generally, the Lenstra~Pomerance—Wagstaff conjecture 
states that 

e the number of primes p < y such that the generalized Mersenne 


number M,,(a,b) = woe is prime is asymptotically 
(e7 + m- log 2) - log, y; 


here a,b are coprime integers, a > 1, —a < b < a, a and Db are not 
both perfect r-th powers for any natural number r > 1, —4ab is 
not a perfect fourth power; the number m is the largest nonnegative 
integer such that a and —b are both perfect 2”-th powers. 

We get the case of Mersenne primes for (a,b) = (2,1): Mn = 
M, (2,1): 
3.6.3. Gillies’ conjecture is a conjecture about the distribution of 
prime divisors of Mersenne numbers; it was made by D.B. Gillies in 
1964: 

eifxr<y< /Mp, as ’ — oo, and M, — oo, the number of 
prime divisors of M, in the interval [x,y] is Poisson-distributed with 


l : 
log (2), if > 2p, 


mean ~ 
1 . 
log (4). af & < 2p. 


He noted that his conjecture would imply that 
e the number of Mersenne primes less than x is ~EeD log log x; 


e the expected number of Mersenne primes M, with x < p < 2z is 


2 log 2p 


e the probability that M, is prime is ~—=+> pie 


The Lenstra~Pomerance—Wagstaff conjecture gives different val- 
ues: 


e the number of Mersenne primes less than x is re log log x; 
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e the expected number of Mersenne primes M, with xz < p < 2z is 
~et: 


e the probability that M, is prime is “128? if p = 3(mod 4), and is 
Pp plog 2 


e? log 6p 


Picea? otherwise. 


Asymptotically these values are about 11% smaller. 

While Gillies’ conjecture remains open, several papers have added 
empirical support to its validity, including Ehrman’s 1964 paper. 

See [BSW89], [Dick05], [Ehrm67], [Wiki20]. 


New Mersenne conjecture 


3.6.4. In the connection with the problem of infiniteness of the set of 
Mersenne primes, mathematicians are very interested in the following 
question: 

e is the New Mersenne Conjecture true? 

We remind, that the New Mersenne conjecture of P.T. Bateman, 
J.L. Selfridge and Jr.S.S. Wagstaff (1989) states that 

e for any odd positive integer p, if any two of the following con- 
ditions hold, then so does the third: 


e p = 2*+1 or p = 4k +3 for some natural number k (sequence 
A122834 in the OEIS); 


e 2?—1 isa prime (a Mersenne prime M,; sequence A000043 in the 
OEIS); 


° a> 1 is a prime (a Wagstaff prime; sequence A000978 in the OEIS). 


The first odd primes of the form 2" + 1 or 4* +3 are 3, 5, 7, 13, 
17, 19, 31, 61, 67, 127, ... (sequence A122834 in the OEIS). 

The exponents p which give Mersenne primes are 2, 3, 5, 7, 13, 
17, 19, 31, ... (sequence A000043 in the OEIS). 

The first (odd) primes p such that the numbers —— are 
(Wagstaff) primes, are 3, 5, 7, 11, 18, 17, 19, 23, 31, 43, (sequence 
A000978 in the OEIS). 

The known numbers p for which all three conditions hold are 3, 
5, 7, 13, 17, 19, 31, 61, 127 (sequence A107360 in the OEIS). 
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It is also a conjecture that 

e no number which is greater than 127 satisfies all three condi- 
tions. 

As of 2020, all the Mersenne primes up to 
and for none of these does the third condition hold except for the 
ones just mentioned. 

Note that the two primes for which the original Mersenne con- 
jecture is false (67 and 257) satisfy the first condition of the new 
conjecture (67 = 2°+3, 257 = 28+1), but not the other two. 89 and 
107, which were missed by Mersenne, satisfy the second condition, 
but not the other two. 

Mersenne may have thought that 2? —1 is prime only if p = 2*+1 
or p = 4* +3 for some natural number k, but if he thought it was “if 
and only if” he would have included 61. 

R. Lifchitz has shown that the New Mersenne Conjecture is true 
for all positive integers less than or equal to 30402456 by systemati- 
cally testing all primes for which it is already known that one of the 
conditions holds. His website documents the verification of results 
up to this number. 

For some additional information see, for example, [BSW89], 
[Dezal7], [Dick05], [Wiki20]. 


gezenone? — | are known, 


Other open questions 


3.6.5. Besides the problem of the infiniteness of the set of Mersenne 
primes, we have an important open question about the infiniteness 
of Mersenne composites: 

e are there infinitely many composite Mersenne numbers M, with 
prime indexes? 

L. Euler proved the following fact: 

eifk>1 and p= 4k +3 is prime, then 2p +1 is prime if and 
only if 2? = 1(mod 2p + 1). 

So if p= 4k +3 and 2p+ 1 are primes (in fact, a Sophie Germain 
prime and a safe prime, correspondingly), then the Mersenne number 
2? — | is composite, because it has a prime divisor 2p + 1. 

As it seems reasonable to conjecture that there are infinitely many 
prime pairs (p, 2p + 1), we can expect, that 
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e there are infinitely many composite Mersenne numbers M, with 
prime index p. 


3.6.6. The following question is still open 

e if every Mersenne number M, is square free? 

This falls more in the category of an open question (to which we 
do not know the answer), rather than a conjecture (which we guess 
is true). 

It is easy to show (see Chapter 3, Section 3.2) that 

e if the square of a prime p divides a Mersenne number, then p 
is a Wieferich prime. 

But the Wieferich primes, i.e., by definition, primes p such that 
p* divides 2?—! — 1, are very rare. 

The only known Wieferich primes are 1093 (Meissner, 1913) and 
3511 (Beeger, 1922); see sequence A001220 in OEIS. 

If any others exist, they must be greater than 1.25 - 101°. 

Neither of these two primes squared divide a Mersenne number. 


3.6.7. Consider a sequence 
CCo = 2, CC, = 2° — 1, CCy = 20% - 1, 
COy = 3 = I CO SF MS cs 


Starting with CC}, this sequence form a subset of the set of Mersenne 
numbers. An open question is: 

e are all the numbers CC, primes? 

These numbers grow very quickly. In fact, the numbers 


CGy=2) CG; =] 2? — 1 =] 3s) COs = HK 1 SF 
CC; = 2" —1= 197; 
CC, = 2!2" — 1 = 170141183460469231731687303715884105727 
are primes. It is unknown, if the number 


CC. > 1921217599719369681875006054625051616349 


is prime. 

It seems very unlikely that CC; (or many of the larger terms) 
would be prime, so this is no doubt another example of Guy’s strong 
law of small numbers. 
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Notice that if there is even one composite term in this sequences, 
then all of the following terms are composite, too. 


3.6.8. One more open question about the behaviour (the infinite- 
ness) of some subset of the set of Mersenne numbers is the following: 
e are there more double Mersenne primes? 
The double Mersenne number M M,, is a Mersenne number of the 
form 


MM, = My, = 27,-'-1, neEN. 


The first few double Mersenne numbers are My, = 1, May, = 
M3 = 7, Mug = M7 = 127, Mu, = Mis = 32767 (sequence A077586 
in the OEIS). 

An early misconception was that 

e ifn = M, is prime, then so is My. 

Indeed each of the first four such numbers is prime: 


MM, = 22? —-1=7; 
M™Msz = 2" —1= 197; 
MM, = 2°) — 1 = 2147483647: 
MM, = 2!?7 — 1 = 170141183460469231731687303715884105727. 


However, the next four (MMj3, MMy7, M Myo, and M M3) all have 
known factors, so they are composite. 

One more question: 

e are there any more primes in this sequence? 

Probably not, but it remains an open question. 

Note that the sequence of numbers C'C,,,n = 2,3,4,..., discussed 
above, is a subsequence of the sequence of the double Mersenne num- 
bers, and a positive answer to the question of primality of these 
numbers will give a positive answer to the questions regarding the 
numbers M M,. 

Some additional information see, for example, in [Dezal7], 
[Dick05], [Ehrm67], [Guy94], [BS W839]. 
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Exercises 
1. Find the smallest square-full Mersenne number. 
2. Find the smallest square-full Mersenne number M,, with odd n. 


3. Prove, that if p is an odd composite number, then 2? — 1 and —— 
are both composite. 


4. Check, that for the numbers 3, 5, 7, 13, 17, 19, 31, 61, 127 all 
three conditions of the New Mersenne conjecture hold. 


5. Check, that the numbers 2, 3, 5, 7, 11, 13, 17, 19, 23, 31, 48, 
61, 67, 79, 89 satisfy at least one condition of the New Mersenne 
conjecture. 
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Chapter 4 


Fermat numbers 


4.1 History of the question 


4.1.1. A Fermat number F,, is a positive integer of the form 
F,= 27" +1, ne€Z, n>0. 


The first Fermat numbers are 3,5,17,257, 65537, 4294967297, 
18446744073709551617, ... (sequence A000215 in the OEIS). 

Fermat numbers were studied by the XVII-th century French 
lawyer and mathematician Pierre de Fermat (1607-1665). 

P. Fermat conjectured (1650) that 

e these numbers would always give a prime for n = 0,1, 2,.... 

In fact, the first five Fermat numbers are primes: Fo = 3, Fy = 5, 
Fy = 17, F3 = 257, Fy = 65537. 

But in 1732 L. Euler found that F5 is a composite number: 


Fs = 9° 41 = 4294967297 = 641 - 6700417, 
where 641,6700417 € P. 


To show it, consider 29?-++1 = 24.278+1, and write 641 = 54+24 = 
5-27 +1. Therefore, 54 = —2*(mod 641), and 5-2’ = —1(mod 641). 
Then we obtain, that 54-278 = 1(mod 641), or —24-2?8 = 1(mod 641), 
or 232+ 1 = 0(mod 641). It means, that 641|F5, i-e., Fs is composite. 
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Other proof is even more elementary. Denote a = 2’, and b = 5. 
Then, noting that a — b? = 3, we obtain that 


2? 4.4 = 24(27)4 41 = 24a4 +1 = (14 3b)at +1 
= (1+ (a—b*)b)a* +1 
1+.ab—b*)a* +1= (1+ ab)a* + (1 — a*b*) 
1 — a7b*)(1 + a7?) 
1 + ab)(1 — ab) (1 + ab?) 
= (1+ ab)(a* + (1 + ab)(1 + 07b7)). 


( 
( 


Therefore, 1+ ab =1+5-27 = 641 divides 2?” + 1, ie., 641|F5. 
So, Fermat’s conjecture that F,, is always prime is clearly false. 
Moreover, beyond Fy, no further Fermat primes have been found. 


4.1.2. The discovery that established further interest in these num- 
bers came in 1796 when Carl Friedrich Gauss proved the constructi- 
bility of the regular 17-gon and announced a relationship between 
Fermat numbers and constructible regular polygons. Five years later, 
he developed the theory of Gaussian periods, which allowed him to 
formulate a sufficient condition for the constructibility of regular 
polygons. Gauss stated without proof that this condition was also 
necessary, but never published his proof. A full proof of necessity 
was given by Pierre Wantzel in 1837. The result is known as the 
Gauss—Wantzel theorem: 

e a regular n-gon can be constructed with compass and straightedge 
if and only if n is the product of a power of 2 and any number of 
distinct Fermat primes (including none): 


n = 2"pipo...pp, wherer,k > 0, 
and pi, <...< pp are Fermat primes. 
Since there are 31 combinations of five known Fermat primes, 


there are 31 known constructible polygons with an odd number of 
sides. 


In fact, a regular n-gon is constructible if n = 3,4,5,6,8, 10, 
12,15, 16,17,... (sequence A003401 in the OEIS), while a regular 
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n-gon is not constructible with compass and straightedge if n = 
7,9, 11, 13, 14, 18, 19, 21, 22, 23, ... (sequence A004169 in the OEIS). 


4.1.3. In XIX-th and XX-th centuries many mathematicians consid- 
ered different aspects of the theory of the Fermat numbers. Among 
them: F.E.A. Lucas, J.F.T. Pépin, T. Clausen (proved the com- 
positeness of Fg, 1855), I.M. Pervushin (proved the compositeness 
of Fig, 1877, and Fo3, 1878), Seelhoff (proved the compositeness 
of Fg, 1886), A.J. Cunningham (proved the compositeness of F'1, 
1899), Western (proved the compositeness of Fy, Fiz and Fg, 1903), 
J. Cullen (proved the compositeness of F3g, 1903), Morehead (proved 
the compositeness of F73, 1906), M. Kratchik (proved the compos- 
iteness of Fis, 1925), etc. 

Summary of factoring status for Fermat numbers F,, (as of 2020) 
is given in the following table. 


Summary of factoring status for Fermat numbers 


n=0,1,2,3,4 


Completely factored n = 5,6,7,8(two factors each), 
9(3 factors), 10(4 factors), 
11(5 factors) 


Six prime Taotors known 
Four prime factors known 
Three prime factors known nm = 15,19, 25, 52, 287 


Two prime factors known n = 16,17, 18, 27, 30, 36, 38, 39, 
42,77, 147, 150, 284, 416, 417 
Only one prime factor known |n = 14, 21, 22, 23, 26, 28, 29, 31, 
32, 37,43 and 268 
values of n with 
43 <n < 18233956 


Composite but no factor known n = 20, 24 
Character unknown n = 33, 34, 35, 40, 41, 
4A, 45, 46, 47, 49, 50, ... 


So, as of 2020, the only known Fermat primes are Fo, Fi, Fo, Fs, 
and Fy, ie., the numbers 3,5, 17, 257,65537 (sequence A019434 in 
the OEIS). 
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It means, that Fy = 65537 is the largest known Fermat prime. 

Moreover, it is known that F,, is composite for 5 < n < 32, 
although of these, complete factorizations of F,, are known only for 
0 <n < 11, and there are no known prime factors for n = 20 and 
n = 24, 

It means, that Fy, = 92!" 4.1 = 27048 4 1 is the largest known Fer- 
mat number with all known factors, and F33 is the smallest Fermat 
number with unknown character. 

In fact, for n = 5, 6, 7, 8, 9 we have the following decompositions. 


Fy = 27 41= 23741 
= 4294967297 
= (5+ 2°? +1) - (52347 - 2°42 + 1) 
= 641 - 6700417. 


It has 10 digits. It is a product of two prime numbers with 3 and 7 
decimal digits, correspondingly. It was fully factored in 1732 (Euler). 


B= 2 4.1= 28441 
= 18446744073709551617 
= (1071 - 25+? + 1) - (262814145745 - 26+? + 1) 
= 274177 - 67280421310721. 


It has 20 digits. It is a product of two prime numbers with 6 and 
14 decimal digits, correspondingly. It was fully factored in 1855 
(Clausen). 


Fy = 277 41=2)8 41 
= 340282366920938463463374607431 768211457 
= (116 503 103 764 643 - 27+? + 1) 
- (11 141 971 095 088 142.685 - 27+? + 1) 
= 59 649 589 127 497 217 - 5 704 689 200 685 129 054 721. 
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It has 39 digits. It is a product of two prime numbers with 17 and 22 
decimal digits, correspondingly. It was fully factored in 1970 (Mor- 
rison and Brillhart). 


Fy = 27 +1 = 2756 44 
= 115792089237316195423570985008687907853269984665640564 
039457584007913129639937 
= (3853149761 - 157 - 28+3 + 1) 
- (1057372046781 162536274034354686893329625329 
-31618624099079 -13-7-5-3-28+3 + 1) 


= 1238926361552897 - 9346163971535797776916355819960689658 
4051237541638188580280321. 


It has 62 digits. It is a product of two prime numbers with 16 and 62 
decimal digits, correspondingly. It was fully factored in 1980 (Brent 
and Pollard). 


Fy = 27 41= 2512 41 
= 13407807929942597099574024998205846127479365...66903427 
69003185818648605085375388281 1946569946433649006084097 
= (37 - 29+" + 1) - (43226490359557706629 - 1143290228161321 
- 82488781 -47-19- 29+? + 1) 


- (16975143302271505426897585653131126520182328037821729 
720833840187223 - 17338437577121 - 40644377 - 26813 - 1129 


229+? 4 1) 

= 2424833 - 74556028256478842083373957362004549 1878336634 
2657 
- 74164006262753080152478714190193747405994078109751902 
3905821316144415759504705008092818711693940737. 


It has 155 digits. It is a product of three prime numbers with 7, 49 
and 99 decimal digits, correspondingly. It was fully factored in 1990 
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(Lenstra, Manasse at all). 


Fig =? 4120" 41 
= 179769313486231590772930...304835356329624224137217 
= 45592577 - 6487031809 - 46597757852200185432645607430767 


78192897 
- 130439874405488189727484...806217820753127014424577. 


It has 309 digits. It is a product of four prime numbers with 8, 10, 
40 and 252 decimal digits, correspondingly. It was fully factored in 
1995 (Brent). 


Fy HP 1 = 2 41 
= 323170060713110073007148...19355585361 1059596230657 
= 319489 - 974849 - 167988556341760475137 - 356084190644583 
3920513 
- 173462447179147555430258...491382441723306598834177. 


It has 617 digits. It is a product of five prime numbers with 6, 6, 21, 
22 and 564 decimal digits, correspondingly. It was fully factored in 
1988 (Brent and Morain). 

In general, 310 Fermat numbers known to be composite. The 
largest known composite Fermat number (Propper, Reynolds, Penné 


and Fougeron, 2020) is Figo33954; it has the prime factor p = 
7 . 218233956 4 1, 


4.1.4. The Fermat numbers grow very quickly: the 9-th number Fo 
has 155 digits and hence is more than googol 100!; the 334-th num- 
ber F334 is more than the gugolplex 1900801 — 19100? 

It is of interest to observe the enormous bigness of the numbers Fy, 
even with relatively small index n. For example, in his Mathematical 
Recreations and Essays, W.W.R. Ball remarks that if the number F73 
“... were printed in full with the type and number of pages used in 
this book, many more volumes would be required than are contained 
in all the public libraries of the world.” 

To put it differently and much more strongly we may say that 
if it were printed in full with the type and format of the Encyclo- 


pedia Britannica, eleventh edition, it would require more volumes 
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than would be contained in 10000000000000 full sets of twenty-nine 
volumes each. 

If printed on ordinary 400-page volumes it would make a library 
of more than two million volumes for each man, woman and child in 
the world. 


4.1.5. As the consequence, many of prime factors of Fermat numbers 
are huge, too. For example, we have shown already, that the largest 
Fermat number known to be composite is F1g933954. Its prime factor, 
7-218233956.41 is a megaprime, i.e., has more than one million decimal 
digits. 

Last years, the distributed computing project Fermat Search is 
searching for new factors of Fermat numbers. 

The set of Fermat factors starts with the numbers 3, 5, 17, 257, 
641, 65537, 114689, 274177, 319489, 974849, ... (sequence A023394 
in OEIS; see also sequence A050922 in OEIS). 

The following factors of composite Fermat numbers (represented 
in the table below) were known before 1950 (since the 1950’s, digital 
computers have helped find more factors). 


Small prime factors of composite Fermat numbers 


Euler Reoe si 

Euler 52347-2741 
Clausen 1071 <2? 4-1 

Clausen 262814145745 - 28 + 1 
Pervushin 732 1 

Pervushin 
Seelhoff 
Cunningham 
Cunningham 
Western 
Western 
Western 
Western 
Cullen 
Morehead 
Kraitchik 579-271 +] 
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As of 2020, 354 prime factors of Fermat numbers are known (and 310 
Fermat numbers are known to be composite). Several new Fermat 
factors are found each year. 

Some additional information see, for example, in [BaCo87], 
[BrMo75], [DeKo13], [Prim20], [Wiki20]. 


4.2 Elementary properties of 
Fermat numbers 


In this section, we give the large list of simplest properties of Fermat 
numbers. All of them can be proven using elementary properties of 
divisibility of integers. 


Elementary conditions of primality of 
Fermat numbers 


4.2.1. First of all, consider elementary properties of Fermat num- 
bers, connected with their prime divisors. 

It is easy to see, that a number of the form 2" + 1 can be a prime 
only if k is a power of 2: 

e for a positive integer k, if 2* +1 € P, thenk = 2", n € Z, 
n>=0 


In fact, consider k € N. Let k = 2”-d, where n € Z, n > 0, and 
d is an odd positive integer. Then 


Fp. a 9444 — (27")44 19 = (27° 41)-K, KEN. 


So, the number 2" +1 has a positive integer divisor 2?" +1. It means, 
that 2" + 1 can be prime only if it coincides with 2” + 1, ie., in the 
case d = 1, and k = 2”. 

By the similar way, one can prove, that 


© ifn” +1 is prime, there exists an integer k such that n = 22" 

It means, that 

e all primes of the form n” +1 are Fermat primes: in this case, 
n?+1= Proxy pg: 
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4.2.2. The main question about a given Fermat number is his pos- 
sible primarily. So, we are going to find primes which cannot to be 
divisors of F,. In fact, as far back as 1730 it was observed that 

e no F, has a proper divisor less than 100; 

a fact easily verified directly by the aid of congruences. 

Obviously, the first prime 2 cannot divide any Fermat number F;: 

e forn>1, it holds F,, = 1(mod 2), 1.e., 2 not divides F;,. 

It is easy to check, that 3 cannot divide F,,, n > 1: 

e forn>1, it holds F,, = 2(mod 3), t.e., 3 not divides Fy. 
Indeed, for n > 1, one has 2” = 21, 1 € N, and we get 


oF 1 = (—1)"' 41S 1 +1 = 26nd 8), 


Similarly, the second odd prime number 5 cannot divide any Fer- 
mat number except F: 

e for n > 2, it holds F,, = 2(mod 5), t.e., 5 not divides Fy. 
In fact, for n > 2, one has 2% = 41, 1 € N; as 24 = 1(mod 5), 
we get 


eh OF ao ie 1S Oned 5). 


We can obtain a similar result for the third odd prime 7: it cannot 
divide any Fermat number F,,: 

e forn > 0, it holds F,, = 3(mod 7) if n is even, and F, = 
5(mod 7) if n is odd, i.e., 7 not divides Fy. 
For n = 0,1 it is elementary: Fo = 3(mod 7), and Fy = 
5(mod 7). 

Consider now an even n > 2. In this case, n = 21, 1 © N. For such 
n one hag 2 = 27 = 4! ie., 2" = 1(mod 3), or 2° = 3k +1, kK EN. 
Then 


BPO hed ee DOPE ees Os (90) Tee RP oe I 
=2-1+1= 3(mod 7). 


At last, consider an odd n > 3. In this case, n = 21+1,1 EN. 
For such n one has 2” = 27+! ~ 2.4! ie., 2° = 2-1 = 2(mod 3), or 
2” = 3k +2,k EN. Then 


OO" pe OP ee ed he = oid 7): 
It is checked, that 
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e no Fermat number F, has a factor less than 10° other than 
factors known at present. 

Moreover, it is possible to prove (Kiizek, Luca and Somer, 2002), 
that 

e the series of reciprocals of all prime divisors of Fermat numbers 
is convergent. 

For some additional information see, for example, [Carm19], 
[Deza17], [DeKo13], [Dick05], [KLSO1], [Madd05], [Tsan10], [Sier64]. 


Last decimal digits of Fermat numbers 


4.2.3. Consider now possible reminders of Fermat numbers modulo 
10 (modulo 100). 

It will give us the information about last digit (last two digits) of 
Fermat number Fy. 

In fact, with the (one-digit) exceptions Fo = 3 and F, = 5, the 
last digit of a Fermat number is 7: 

e for n > 2, it holds F, = 7(mod 10), i.e., the last digit of Fy, 
as 7. 


Really, for n > 2 it holds F, = 2(mod 5), i.e., F, = 5t + 2, 
teN. 

Obviously, F;, = 1(mod 2). 

So, we get the congruence 5t + 2 = 1(mod 2). It is equivalent to 
the congruence t = 1(mod 2), which gives t = 2t; + 1, ty € Z. So, 


F, = 5t+ 2 = 5(2t, +1) +2=10t+7, or F, =7(mod 10). 


One can easy obtain the similar result modulo 100: with the (one- 
digit) exceptions Fy = 3 and F, = 5, the last two digit of a Fermat 
number are 17, 37, 57 or 97: 


e forn > 2, n = 4l, tt holds F,, = 37(mod100), 1.e., the last two 
digits of Fy, are 37; 


e forn>2,n=41+1, it holds F,, = 97(mod100), i.e., the last two 
digits of Fy, are 97; 
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e forn>2,n= 41+ 2, it holds F,, = 17(mod100), i.e., the last two 
digits of Fy, are 17; 

e forn>2,n=41 +3, it holds F, = 57(mod100), i.e., the last two 
digits of F, are 57. 


The reader can easily check these facts, solving the congruence 
a = 2?" + 1(mod 2? - 5”) (see Chapter 1). 

For some additional information see, for example, [Carm19], 
[Deza17], [DeKo13], [Dick05], [KLSO1], [Madd05], [Tsan10], [Sier64]. 


Recurrent relations for Fermat numbers 


4.2.4. Consider now some important recurrent relations, connected 
with Fermat numbers. 
First of all, it is easy to obtain the Fermat number with index n, 
using the Fermat numbers with all previous indexes 0, 1, 2,...,.n — 1: 
e forn > 1, it holds F,, = Fo: Fy-...- Fy-1 + 2. 
In fact, for n > 1, one has 


gn-1 gn-1 


FP, =-2=2" -1=2" 410" =1) 
= (27"" 4:1)(2?"* 4:12" -1) =... 
= 22°" 4.1)(2?"? +.1)...(27 +.1)(22° +. 1)(2” — 1) 
a ey oe ey 


There are several other recurrences between Fermat numbers. For 


example, 
e forn > 1, it holds F, = (Fy_-1 —1)7 +1. 
We can prove it using elementary reasons: 


F,—-1=27 = (2?"")? =(F,_1 — 1). 


Moreover, the Fermat numbers satisfy the following recurrence 


relation: 
e for n > 2, it holds F, = Fy1 +22" Fo-Fy-...- Fy_o. 


160 Mersenne Numbers and Fermat Numbers 


As before, it is easy to see, that 

BoP a are = 1) 
= 2 (92 4.1)(07" 7 1) =... 
SE a ea =) 
aes ees oF 

Note, that the last formula can be rewrite as 

BSF Pisa het ae 


At last, we can prove the following fact: 

e forn > 2, it holds F, = F2_, — 2(Fy_2 —1)?. 

Really, elementary (but accurate) work with the powers of 2 
gives us, that 


fee el) eee? 


= (Cie 4 1 4 2 . 2"! _ 9 . 92:2"? 
_ 92” +4 1 +4 gered _ gant +1 
a2" lat. 


Note, that the pair (F,-1, F,-2—-1) gives a representation of the 
n-th Fermat number F), in the form «2? — 2y?, where x and y are 
positive integers. One can check (see Chapter 8), that 

e forn > 2, every Fermat number has infinitely many represen- 
tations in the form x? — 2y?, where x and y are positive integers. 

For some additional information see, for example, [Carm19], 
[Dezal7], [DeKol3], [DeMol0], [Dick05], [KLSO1], [Madd05], 
[Tsan10], [Sier64]. 


Divisibility properties of Fermat numbers 


4.2.5. The results, represented before, allow us to obtain a very 
important property of divisibility of Fermat primes. 

It is well-known, that any two different Fermat numbers form a 
pair of coprime positive integers: 

e forn#™m, it holds gcd(F,, Fm) = 1, i.e., the numbers F, and 
Fy, have no common prime divisors. 
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In order to prove this formula, let assume that gcd(F;,, Fin) = d, 


d > 1. Then there exists a prime number p, such that pld. In this 
case, it holds that p|F,,, and p|Fiy. 

Without loss of generality, let n > m. As p|F,,, then p|Fo- Fy -...- 
Fyy- + Fy_1. From the recurrence F,, = Fo: Fy -...+ Fp_1 + 2, using 
relations p|Fy, p|Fo- Fi -...- Fin: ...- Fn—1, we get p|2, i.e., p = 2. 

As any Fermat number is an odd positive integer, it is not divisible 
by 2; it gives a contradiction. So, it is proven, that gcd(F,, Fm) = 1 


forn Am. 
This fact allow as to give one more proof of infiniteness of the set 
of prime numbers: 
e there are infinity many prime numbers. 
Indeed, consider the set {Fo, fi, Fo,...,Fn,...} of all Fer- 
mat numbers. It is obviously infinite. For each F,,, denote by 


dn the smallest prime divisor of F;,. On this way, we get a set 
{0; 91; 925 ++: Qn; ---} Of prime numbers: go = 3, qi = 5, q2 = 17, 
etc. As for n 4 m it holds gq, #4 Gm, all elements of the set 
{0; M1; 92; +5 In; +} are different odd prime numbers, and we obtain 
an infinite subset of the set P of primes. It proves, that the set P 


itself is infinite. 

For some additional information see, for example, [Carm19], 
[Dezal7], [DeKo13], [Dick05], [KLSO1], [Madd05j, [Tsan10], 
[Sier64]. 


Composite relatives of Fermat numbers 


4.2.6. As we could see before, the question about primarily of 
Fermat numbers, i.e., the numbers of the form 22” + 1, is really 
difficult. 

On the other hand, we can construct several classes of num- 
bers, which are relative to the set of Fermat numbers, but all are 
composite. 

For example, what can we obtain, if change the unity in the for- 
mula 2?" +1 to the other odd positive integer (if instead of 1 we put 
an even number, the situation became trivial, all such numbers will 
be even)? 
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For the smallest such shift the situation is not obvious; we imme- 
diately get prime numbers of the form 2?" +3 (i.e., of the form F,, +2): 
2° 43=5, 22 +3=7, and 27 43=19. 

However, one can prove, that 

e among the numbers 2?" +3 there are infinitely many composite 
ones. 


For example, the number F3 + 2 = 259 = 7 - 37. 
Moreover, for any Fermat number with odd index it holds 7|(F;, + 


2): it was proven, that for odd n we have the congruence F;, 
5(mod 7); hence, F,, + 2 = 0(mod 7). 
More exactly, let n = 2k +1,k<€N. As 2k is even, we get 


OF = 971 = 959" & D(miod 3); 


Le, 2” = 314 2, and 


2 ean ga? (2) gS Asis = Dimod 7), 


On the other hand, the next possible shift gives us only composite 
numbers: 

e for any n> 1, the number F, + 4 = 2?" +5 is composite. 
It is easy to check, that all numbers 9, 21, 261, 65541,... of the 
form 22" +5, n> 1, are divisible by 3. In fact, for such n the number 
2” is even: 2” = 21,1 EN. So, it holds 


Fo tae? 45 S(-1)" 45 S145 S6 = (med 3). 


Some shifts of such kind we can use also for squares of Fermat 
numbers. For example, we can prove the following fact: 

e for anyn > 1, the number (F,)?+2 = (22" +1)?+2 is composite. 
In fact, the sequence of the numbers (2?" +1)?+2, n > 1, starts 
from the numbers 27, 291, 66051, .... It is easy to see, that all these 
numbers are divisible by 3. Really, we proved, that F,, = 2(mod 3) 
for any n > 1. So, for such n it holds 


(F,)? +2 = 2? +2 =6=0(mod 3). 


The same arguments allow us to prove the similar result for the 
numbers of the form (F,,)? + 8: 
e for anyn > 1, the number (F,)2+8 = (22" +1)?+8 is composite. 
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Using similar property of Fermat numbers modulo 7, we obtain, 
that all numbers of the form (F;,)? +8 are divisible by 7: 

e for anyn > 1, the number (F,)?+8 = (22" +1)3+8 is composite. 
In fact, the sequence of the numbers (22” + 1)? +8, n > 1, 
starts from the numbers 133 = 7-19, 4921 = 7-703, and 16974601 = 
7 + 2424943. 

In general, one has proven, that F;, = 3(mod 7) or F;, = 5(mod 7) 
for any n > 1. As 33 = 27 = —1(mod 7), and 5? = 125 = —1(mod 7), 
we have, that (F;,)? = —1(mod 7) for any n > 1. So, it holds 


(#Y £62 (1) 48 =F =0(miod 7): 


For some additional information see, for example, [Carm19], 
[Deza17], [DeKo13], [Dick05], [KLSO1], [Madd05], [Tsan10], [Sier64]. 


Additive properties of Fermat numbers 


4.2.7. Consider some additive properties of Fermat numbers. 

For example, it is easy to show, that any Fermat number except 
F, = 5 cannot be represented as a sum of two primes: 

e for anyn #1 and any primes p and q, it holds F, Ap+q. 
As F;, is odd for any n > 0, it cannot be represented as a sum of 


two odd primes p,q. So, in each representation of fF, = p+ q as one 
of the primes, say p, is equal to 2. It is impossible for Fo = 3; it is 
possible for F: in fact, 5 = 2+ 3. In general, if F, = 2+ q forn > 2, 
it holds q = F, — 2. As F, = 2(mod 3), then F,, — 2 = 0(mod 3), 
i.e., ¢ = 0(mod 3). It is possible only for g = 3. In this case we have 


that p+q=5, a contradiction to the case n > 2. 


It can be proven also a similar result about squares of prime num- 
bers: 
e for any n > 0 and any primes p and q, it holds F, #4 p? + q?. 


Without loss of generality, let n > 2: it is easy to see, that 
pt+@>s8>R=s. 
Note, that for F;, = p? + q? one of primes p,q (say, q) should be 


even: for two odd numbers p, q (as well as for two even numbers), we 
get even sum p? + q?. 
In this case, it holds F, = p? + 2?, or F, —4 =p”. 
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For n > 2, we have the congruence F,, = 2(mod 5); so, F, —4= 
2—4 = 3(mod 5). 

On the other hand, for any prime number p it holds p = 
0,+1,+2(mod 5), and, hence, p? = 0,+1(mod 5); a contradiction. 


Moreover, it is easy to see, that 

e for any n > 0 and any primes p and q, it holds F, 4 p?+q?+1. 
Without loss of generality, let n > 2: it is easy to see, that 
pe+eti>o9>F=5d. 

In order to prove the last formula, note, that equality F, = p? + 
q? + 1 is possible only for two odd primes p and q: if exactly one 
of these primes is even, we will get an even number p? + q?+ 1, a 
contradiction; if both such numbers are even, then p? + g? + 1 = 9; 
it is not a Fermat number. 

Moreover, if both such numbers are equal to 3, then p?+q?+1 = 
19; it is not a Fermat number, too. 

If only one of the primes (say, q) is equal to 3, we get the equality 
2?" +1 = p?+37+1, or the equality ae —3? = p’. In this case it 
holds (22"' —3)(22”"' +3) = p?; it is possible only for 22”. '—3 =1, 
and 22"° 43 = p*. From the first condition we get n = 2; but in 
this case 22".'+3=74 p?. 

So, if F,, = p?+q?+1, then p,q are odd primes greater than 3. It 
is well-known (see Chapter 1), that for any odd prime number p > 3 
it holds p = +1(mod 6); so, p? = 1(mod 6). Therefore, 


p+q@+1=14+141=3(mod 6). 


On the other hand, for any n > 1 it holds F,, = —1(mod 6). In fact, 
for such n the number 2” is even, and 22" = 4(mod 6); hence, 


oe Al es Sad ©): 


This gives a contradiction. 
It can be proven also, that any Fermat number, except F>, cannot 
be decomposed into a sum of squares of three primes numbers: 
e for any n 4 2 and any prime numbers p, q, r, it holds F, # 
pt@tr?. 
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In fact, Fo = 3 and Fy = 5 cannot be represent as sums of 


squares of three primes numbers; Fy = 17 is represented as 37 + 2? + 
2. 

For n > 3, there are two cases: all three primes are odd, or exactly 
two of them (say, g and r), are even. In the last case, we have, for 
p = 3, the sum 3? + 2? + 2: if p > 3, we get the congruence 


pt+@tr?=14+4+4=9= 3(mod 6). 


It gives a contradiction with the property F,, = —1(mod 6). 

Now, let all prime numbers be odd. If all three of them are equal 
to 3, we get the number 3? +3? +3? = 27; it is not a Fermat number. 
If exactly two of them equal to 3, we get the congruence 


p? +3743? =14949=19=1(mod 6). 


It gives again a contradiction with the property F;,, = —1(mod 6). 
If exactly one of them is equal to 3, we get 


Pep bg? 4-3", or p+q =2? -8. 


For n > 1, 2?" — 8 = 0(mod 4); but for odd prime p it holds p? = 
1(mod 4) (see Chapter 1), so, p? + q? = 2(mod 4); a contradiction. 

At last, if all three primes are greater than 3, we have the con- 
gruence 


pit+@tr?=14+14+1= 3(mod 6); 


It gives again a contradiction with the property F,, = —1(mod 6). 


One more interesting additive property is connected with Fermat 
primes. In fact, no Fermat prime can be expressed as the difference 
of two p-th powers, where p is an odd prime: 

e if F, © P, then F, 4 a? — bP, wherea,bE N, pe P, p> 2. 
Assume for contradiction that there is such a Fermat prime. 


Then 


F, = a? — b? = (a — b)(a? 1 + ao? 7b +... tab? 1 +8"), 


where a > b, and p:p is an odd prime. Since F,, is a prime, it must be 
the case a—b=1. 
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Moreover, by the Fermat’s little theorem, a? = a(mod p), and 
bP = b(mod p). Thus, 


F,, = a? — bP? =a—b=1(mod p). 


This implies p|(F, — 1), i-e., p|2?”, a contradiction. 
For some additional information see, for example, [Carm19], 
[Deza17], [DeKo13], [Dick05], [KLSO1], [Madd05], [Tsan10], [Sier64]. 


Other elementary properties of Fermat 
numbers 


4.2.8. Consider now some elementary properties of Fermat numbers, 
which allows us to find connections between F;, and other classes of 
special numbers. 

For example, it is easy to see, that Ff, cannot be represented as a 
perfect square: 

e for any n> 0, it holds F, 4 k?, wherek EN. 
This fact is almost obvious. It was proven before, that F;, 
7(mod 10). 

But only a number that is congruent to 0,1,4,5,6, or 9 modulo 
10 can be a perfect square: so, F;, 4 k?. 

The other proof uses elementary divisibility properties. If 2’” + 
1 = k, then k is odd, and 2” = (k—1)(k+1). Therefore, 2° = k—1, 
gmt —k +1, wheret EN, t < m-—t. In this case one has 


QT oP a OQ ol) = (Ra 1) = (= 1) = 2, 


ie, $=1,k =3, andm=s3. 
Therefore, the only perfect square of the form 2” + 1 is 9, which 
is not a Fermat number. 


It means, that 

e any Fermat number cannot to be a square number. 

Similarly, it is easy to see, that F,, cannot to be a perfect cube: 
e for any n> 0, it holds F, 4 k?, wherek EN. 

Thus, any integer & is congruent to 0,+1,+2, or +3 modulo 7, 
so, k? = 0,1,6(mod 7). But for any n > 1, it holds F, = 3,5(mod 7). 


Fermat numbers 167 


For n = 0, Fo = 3 also is not a cube of an integer. Therefore, Ff, 4 
k3, 


It means, that 

e any Fermat number cannot be a cubic number. 

If we consider modulo 3, we can prove for the same way, that 
F, 4 k*. (Of course, as k* = (k)?, we can use in this case the 
previous result F;, 4 k?.) 

It means, that 

e any Fermat number cannot to be a biquadratic number. 

In general, it is proven, that F;, cannot to be any non-trivial power: 

e for any n> 0, it holds F, #k*, where k,s © N, and s > 2. 

In fact, as 2” + 1,m 4 3, is not a perfect square, then in the 
equality 2” + 1 = k* the number s should be odd. Then 


WP (Roh Ae? ee ee), 

But it is impossible, as the number (k°~! + k8-? +--.+k+4+1) is 
odd. 

Similar arguments allow to get the following result: 

e for any n> 0, it holds Fy, # ae wherek EN. 
In fact, for n > 2 it holds 

20 pie iS y £121 2G 5), 
while the number KEY) # 2(mod 5): for k = 0,4(mod 5) we get 
KET) = 0(mod5); for k = 1,3(mod 5) we get kk) = 1(mod 5); 
for k = 2(mod 5) we get Ker) = 3(mod 5). For n = 1 the number 


F, = 5 is not a triangular number too. 
eet) 


The numbers of the form 


k €N, are called triangular. 
So, we got the connection eee Renal numbers and triangular 
numbers: 

e any Fy, cannot be a triangular number. 

It is proven (Luca, 2000), that 

e any Fermat number cannot be a perfect number or part of a pair 
of amicable numbers. 


4.2.9. There exist simple connections between Fermat numbers and 
Mersenne numbers. Obviously, it holds 


Fy — 2 = Mon. 
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From this formula one can obtain the following elementary fact: 
e the pairs (3,5) and (5,7) are the only pair of twin primes, con- 
tain one Fermat number and one Mersenne number. 


In fact, if (p,p + 2) is a pair of twin primes with p = Mg, 
p+2= F,, then Mp +2 =F, ie, 2* = 2?", and k = 2". The index 
of prime number My, should be prime; so, the only possible case is 
k = 2, and n = 1. So, the pair (3,5) is the only pair (F;,, M;,) of twin 
primes. 


On the other hand, if (p, p+2) is a pair of twin primes with p = F,,, 
p+2= Mz, then M, — 2 = F),. It holds for k = 2, and n = 1. For 
odd k > 3, we get My, = 1,2(mod 5), and M;, — 2 = 4,0(mod 5). 
But for n > 2, F, = 2(mod 5). So, the pair (5,7) is the only pair 
(M;, Fn) of twin primes. 


Using the Fermat’s little theorem, we can prove, that any prime 
Fermat number F,, divides infinitely many Mersenne numbers: 
e if p is a Fermat prime, then p|Mgip—1), where k = 1, 2,3,.... 


In fact, for a given odd prime p, we have 2?-! = 1(mod p); 


therefore, 2”-!) = 1(mod p) for any positive integer m, ice., 
pl(zm-D — 1). 
In particular, any Fermat prime p divides the Mersenne number 
My-1. On the other hand, 
e if p is a Fermat prime, then p? {My-1. 
Let p be a Fermat prime, i.e., p = 2?" +1. So, it holds p—1 = 2?”. 
If the congruence 2?~! = 1(mod p?) holds, then 2?”-) = 1(mod p?), 
and p?|(22-)) — 1). Therefore, fae It means, that 


Pp 
92(p—1) | 92-2" _ 
——_ = 0) dp), —— =0 d p). 
. (mod p), or Pd (mod p) 
It is ease to see, that 
g22° 4 a")? -1 2?" —1)(2" +-1 ‘ 
m1 OP =-1_ OP - YE" +) ye _1_, 9 
22" 4.1 Q27 41 22" +1 
Hence, 
222" — 1 


oF ay =P 2 = —2(mod p), and —2=0(mod p). 


It means, that p|2, i.e., p = 2; a contradiction. 
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4.2.10. Remind, that a Wieferich prime is defined as a prime num- 
ber p such that p? divides 2?-! — 1. In other words, we have proven 
that 

e Fermat prime cannot be a Wieferich prime. 

On the other hand, we have proven, that for prime F;, it holds 
F,,\(2'"-1 — 1), or, which is the same, F,,|(2’" — 2). In fact, this 
property is true for all Fermat numbers: 

e forn>0, it holds F,,\2*" — 2. 

It is easy to see, that Fo|2"° — 2. For n > 1 we get 


oF 9 = 2/27] — 1) = 2(2" — 1) = 2( Fon — 2). 
Since for any k > 1 it holds Fy — 2 = Fo- fF) -... Fy_1, we have, that 
Qhn __9 = 2Fy-F,-... Fon_y, and Fy,|(2*" —2) forany k<2”-1. 


Since for any positive integer n it holds n < 2” — 1, we have proven, 
that in this case F,,|2"" — 2. 
This property means, that 


e composite Fermat numbers are Fermat pseudoprimes with 
base 2. 

As by definition, a Poulet number is a Fermat pseudoprime with 
base 2, we have proven, that 

e any composite Fermat number is a Poulet number. 

Moreover, it can be proven that if for a natural number k number 
m = 2"+1 satisfies the relation m|2™—2, that m is a Fermat number: 

e if 2% +1\(2? +1 2), KEN, then k = 2” for some n> 0. 

In other words, if 2*+1 is a pseudoprime to the base 2, then k is 
a power of 2. 
In fact, let 22" = 1(mod 2* +1). Obviously, 


O° = — (mod 2” + 1). 60, 2°" = (mod 2° 41). 


Let e = ordyx,,2. Then e > k +1; otherwise we have 2° < a 
2* + 1. Moreover, e|2k, so it follows that e = 2k. But e|2", which is 
only possible if & is a power of 2. 


However, in general it is not true for other bases. For examples, 
F's = 4294967297 is not a pseudoprime to the bases 5 or 6, since we 
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have 
54294967296 — 9179108346(mod 4294967297), and 
64294967296 — 3029026160(mod 4294967297). 


Hence, it is possible to use the Fermat’s little theorem to test the 
primality of a Fermat number as long as we do not choose 2 to be 


our base. 
In 1904, M. Cipolla showed that 
e the product Fn, - Fao: Fn, of at least two distinct Fermat 


numbers is a Fermat pseudoprime to base 2 if and only if 2" > ny. 

For some additional information see, for example, [Carm19], 
[Deza17], |[Deza18], [DeKo13], [Dick05], [KLSO1], [Luca00], [Luca01], 
[Madd05], [Tsan10], [Sier64], [Prim20], [Wiki20]. 


Exercises 
1. Prove, that Ff, + 10 is composite for any n > 1. 


2. Prove, that F, = 2(mod15), PF, = l1(mod16), Fy = 
17, 41(mod 72) for any n > 2. 


. Check, that Fg < 10!°, but Fy > 101°. 

. Prove, that F73 has more than 24 - 107° digits. 

. Prove, that F334 has more than 210! digits. 

. Prove, that Fig45 has more than 24 - 10°° digits. 


ND Ooh FF W 


. Prove, that last two digits of any Fermat number, except Fo and 
F,, are 17, 37, 57 or 97. 


8. Check, that last three digits of the numbers F73 and Fj945 are 897 
and 297, correspondingly. 


4.3 Fermat primes: Prime divisors 
of Fermat numbers 


4.3.1. The principal problem studied in connection with Fer- 
mat numbers is that of their primality (factorization). The most 
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elementary and obvious method for finding the factors of a given 
number n is to test it for divisibility by primes less than ./n; but if 
the given number is a large prime or has only large prime factors it 
is obviously that the corresponding work is almost prohibitive. 

One of the earliest used improvements on this method consists in 
determining certain properties of the prime factors of the numbers 
in consideration and then testing with only those primes which have 
this property. 

Thus, L. Euler showed that all factors of F,, n > 1, are of the 
form 2”+!.k +1. Later E. Lucas proved that this k should be even; 
in fact, he proved, that all factors of F,, n > 2, are of the form 
art? +1. 

At a time when it was still unknown whether F¢ is prime or com- 
posite, E. Lucas remarked that if it is prime the demonstration of 
this fact’ by aid of Euler’s theorem would require a calculator the 
enormous period of three thousand years. 


Properties of prime divisors of Fermat 
numbers 


4.3.2. So, we are going to prove, that all prime divisors of Fermat 
numbers are of the special form: 

e any prime divisor p of F,,n > 1, has the form p = 2"*'k +1. 
In fact, if p|F,, n > 1, then 


nm 


2?" =—1(mod p), and (2”")? = 1(mod p), 


ie, 22""" = 1(mod p). Therefore, ordy 2 = 2"t!. As ordya|(p — 1), 
we obtain, that 


Pg 41), and p= 2 e+ 1, 


For n > 2 this result cam be improved: 
e any prime divisor p of Fy,n > 2, has the form p = 2"+?k +1. 


In fact, for n > 2, we have that 


p= 2"*1k+1=1(mod 8), 


hence, the Legendre symbol (2) = 1, ie., by the Euler’s criterion, 
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pHi —1 


2°> =1(mod p), and 2”*1 = ord, 2|-——, ie, p= 2? e+1. 


P. Fermat was probably aware of the form of the factors later 
proved by L. Euler, so it seems curious that he failed to follow through 
on the straightforward calculation to find the factor. One common 
explanation is that P. Fermat made a computational mistake. 

For some additional information see, for example, [Carm19], 
[Dezal7], [DeKol3], [DeKol18], [Dick05], [KLS01], [Madd05], 
[Tsan10], [Sier64], [Step01]. 


History of the search of prime divisors of 
Fermat numbers 


4.3.3. This properties of prime divisors of F;, are used in investiga- 
tions, whether a given Fermat number is prime or not. 

Thus, any prime divisor of Fs must be of the form 2’-k +1 = 
128k + 1. We obtain the primes for k = 2 and k = 5 only: they are 
the numbers 257 and 641, respectively. The prime 641 divides Fs, 
and Fs id the product of two different primes: 


Fs = 2?” + 1 = 4294967297 = 641 - 6700417, 
where 641,6700417 € P. 


This fact was discovered by L. Euler in 1732. 

F. Landry, 1880, proved, that 2741|Fg. He checked primes of the 
form 2°. k +1 = 256k + 1. The prime number 2741 = 256k + 1 for 
k = 1071. In fact, Fg has 20 digits and is a product of two primes of 
the form 256k + 1 with k = 1071 and & = 262814145745: 


F¢ = 274177 - 67280421310721, 
where 274177, 67280421310721 € P. 


This method was not so easy for 39-digital F7 and 78-digital Fg. Only 
in 1975 it was obtained by M.A. Morrison and J. Brillhart, that Fy 
has a prime divisor 2° - 116503103764643 + 1. More exactly, Fy has 
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39 digits and is a product of two primes of the form 512k + 1 with 
k = 11141971095088142685 and & = 116503103764643: 
Fe = 9649589127497217 - 5704689200685129054721, where 
9649589127497217, 5704689200685129054721 € P. 


The decomposition of 62-digital number Fg into two primes, one 
of which has 16 digits and is of the form 2!'-k +1 with 


k, = 3853149761 - 157 = 604944512477, 
and the other has 62 digits and is of the form 2!'-k +1 with 


k = 1057372046781162536274034354686893329625329 
- 31618624099079 -13-7-5-3 
= 934616397 1535797776916355819960689658405 123754163818858 
0280321, 


was obtained in 1980 by R.P. Brent and J.M. Pollard. 

A.E. Western (1913) found prime divisor 2424833 of the form 
2".k+1 with k = 2°-37 = 1184 for the 155-digital Fy. Two others 
prime divisors of it, 49-digital prime 2'' -k + 1 with 


k, = 43226490359557706629 - 1143290228161321 - 82488781 - 47 - 19, 
and 99-digital prime 2! .k +1 with 


k = 1697514330227150542689758565313112652018232803782172972 
0833840187223 - 17338437577121 - 40644377 - 26813 - 1129 


were obtained in 1990 (Lenstra, Manasse at all). 

J.L. Selfridge (1953) proved that p = 2!" - 11131 +1 divides 309- 
digital Fo. Other three prime divisors of it were obtained in 1962 
(Brillhart, g = 2° - 395937 + 1), and in 1995 (Brent). 

Two prime divisors, 2!°-39+1 and 2!3-119+1, of 617-digital Fy, 
were obtained in 1899 by Cunningham; other three prime divisors 
were ontained in 1988 (Brent and Morain). 

The prime divisor 2!4- 7+ 1 of Fiz was found in 1877 by I.M. 
Pervishin and, independently, by EB. Lucas. In 1903, A.E. Western 
found two more its prime divisors, 2'® - 397 + 1, and 2'6 - 973 +1. 
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The first prime divisor, 2'© - 41365885 + 1, of F,3 was found only 
in 1974 (Hallyburton and Brillhart). 

Some additional informstion about small prime divisors of Fermat 
numbers, which were found before 1950, is given in the Chapter 4, 
section 4.1. 

See also [Kell20], as well as [Carm19], [Dezal7], [DeKo13], 
[Dick05], [KLSO1], [Madd05], [Tsan10], [Sier64]. 


Primality of numbers k - 2+ 1 


4.3.4. As any prime divisor of F,, n > 1, has the form k- 2+! +1, 
the natural question is: which number of the form k-2™+1, mEN, 
k=1,2,..., is a prime? 

If k = 1, we have only five known primes of the form 2” + 1 (for 
m = 1,2,4,8,16). They are all known Fermat primes Fo — F4. 

If k = 2, we have only four known primes of the form 2-2” + 1 
(for m = 1,3,7,15). They also are Fermat primes Fy — F4. 

If k = 3, we have 19 known primes of the form 3 - 2” + 1 (for 
=, 2; 5,6, 8, 12-18, Bb, ons): 

If k = 4, we have only three known primes of the form 4-2’ + 1 
(for m = 2,6,14). They are Fermat primes F> — Fy. 

If k = 5, there are 17 known primes of the form 5-2” + 1 (for 
he 18. fo 18, WD 20, 39; Oo, 22.) 

Moreover, for any k < 3061 we know at least one m such that 
k}-2™ +1 is a prime number. 

For k = 3061, the number &- 2" + 1 is prime for any m < 17008. 

On the other hand, W. Sierpinski had shown in 1960, that 

e there exist infinitely many k € N, such that k-2™-+1 is composite 
for anymeEN. 
In fact, we know, that F,, is prime for n € {0,1,2,3,4}, while 
Fs is a product of two primes, 641 and p, where p > F 4. 

The Chinese Remainder theorem allows to state, that there are 
infinitely many positive integers k, such that 


k = 1(mod (27 — 1) 641), and k =—1(modp). 


It is easy to show, that for all such numbers, greater than p, all 
numbers k - 2” + 1, n € N, are composite. 
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Consider n = 2°(2t +1), where s € {0,1,2,3,4}, and t > 0 is 
some integer. In this case, it holds 


ae oS oP 4 med (F = 1), 


as F,|(2?°@+) +1), and F,|(232 — 1), then F,|k - 2” + 1. Moreover, 
F< k. So, the number &- 2” + 1 is composite. 
Consider now n = 2°(2t + 1), where ¢t > 0 is some integer. Then 


k-2" +1 = 272+) + 1(mod 641). 


As 641|(22” +1), and 22° + 1|(2?°@#+) +1), then 641|(k-2"+1), and 
641 <k-2"+1. So, k- 2” +1 is composite. 

At last, consider n = 2° - t, where t is some positive integer. In 
this case 


ie aes eee eae 1(mod p). 


As p|(22° +1), 2?” +1|(2?° —1), 2?° —1](2?°¢—1), it holds p|(k-2"+1), 
and p< k- 2" +1. So, the number k- 2” + 1 is composite. 
A Sierpinski number is defined as an odd natural number k such 


that k-2-+1 is composite for all natural numbers m. So, it is proven, 
that 

e there are infinity many Sierpinski numbers. 

The sequence of currently known Sierpinski numbers begins with 
78557, 271129, 271577, 322523, 327739, ... (sequence A076336 in the 
OEIS). 

The first number of this sequence, 78557, was proved to be a 
Sierpinski number by J. Selfridge in 1962. No smaller such numbers 
have been discovered. 

It is now believed that 78557 is the smallest Sierpitiski number. 


4.3.5. If for number k-2”-+1 we put k =m =n, we obtain a Cullen 
number 


Cyh=n-2"°+1, nEN. 


They were first studied by J. Cullen in 1905. 

The only known Cullen primes are those for n = 1,141, 4718, 
5795, 6611, 18496, 32292, 32469, 59656, 90825, 262419, 361275, 481899, 
1354828, 6328548, 6679881 (sequence A005849 in the OEIS). 


176 Mersenne Numbers and Fermat Numbers 


It has been shown (Hooley, 1976) that 

e almost all Cullen numbers are composite. 

Still, it is conjectured that 

e there are infinitely many Cullen primes. 

For some additional information see [Sier64], [Hool76], as well as 


[Carm19], [Deza17], [DeKo13], [Dick05], [Kell20], [KLSO1], [Madd05], 
[Tsan10], [Wiki20]. 


Exercises 


di, 


Prove, that F3 is prime, by checking of all primes p < /F3 of the 
form 32k + 1. 


. Prove, that Fy is prime, by checking of all primes p < \/ Fy of the 


form 64k + 1. 


. Prove, that F5 is composite, by checking of all primes p < WF5 of 


the form 128k + 1. 


. Prove, that Fg is composite, by checking of all primes p < Fg of 


the form 512k + 1. 


. For k = 4, find the first ten elements of the sequence k - 2” + 1, 


n € N. How many primes are found? 


. For k = 4, find the first ten elements of the sequence k - 2” + 1, 


n € N. How many primes are found? 


. For k = 5, find the first ten elements of the sequence k - 2” + 1, 


n € N. How many primes are found? 


. Prove, that k = 4,5,6,7,8,9,10 are not Sierpinski nubers. 
. Find the first ten Cullen numbers n- 2” +1, n € N. How many 


primes are found? 


4.4 Fermat primes: Pépin’s test 

4.4.1. An other method to check primality of Fermat numbers is the 
Pépin’s test: Fermat number F,, n > 1, is a prime if and only if it 
holds F,|3-°= +1. 
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It is a variant of the Proth’s test. The test is named for a French 
mathematician T. Pépin. 

This method consists not just in seeking the factors of F;, but also 
in the inverse process of ascertaining whether it is itself a factor of a 
number in a certain sequence. 


Proof of the theorem 


4.4.2. Consider the proof of the Pépin’s theorem. 


Fy 


Theorem (Pépin’s test). Forn > 1, F,, € P if and only if 3-2 
—1(mod F,,). 
To prove this theorem, note, that for n > 1 one has F, = 
12k +5, as 4* = 4(mod 12) for any positive integer k. 

I. Let F,, € P. Then, using properties of Legendre symbol (see 
Chapter 1, Section 1.5) and the congruence F;,, = 1(mod 4), we get 


G)-(2)-(@)- 


Therefore, by the Euler’s criterion, 


Fi 


3°27 =-—1(mod F,). 
IL If 3° = —1(mod F,,), then 3’-—1 = 1(mod F,.). 
Let p be a prime divisor of F,,. As p|F;,, then 
<_< —1(mod p), and 3*"~1 = 1(mod p). 


If ord, 3 = y, then y|(F, — 1), and y {==. In other words, it holds 


427", and > f2?"-1. 


Therefore, y = 22". It is well-known, that ord, a|(p—1). So, y|(p—1), 
ie., 2?"|(p —1). Therefore, it holds 


Fy, — 1|(p — 1), and P\Fn. 


It is possible only for p = F,. In fact, if p 4 Fy, one has p = 2?"-X+1 
for some positive integer X > 1, and p|(2?" +1). In this case, it holds 
that p|2?"(X — 1), ie., for an odd prime p, that p|(X — 1). In this 
case, X —1> p, or X —1>22"X +1, a contradiction. 

See, for example, [Buch09], [DeKo13], [DeKo18], [Step01]. 
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Practical algorithms of calculation 


4.4.3. The expression 3" can be evaluated modulo Fy, by 
repeated squaring. If we denote by rest(t) the remainder rest(t, F;,) 
obtained as F,, divides an integer t, and set 


ry = 3, Tei = rest(r?2), 
we get, that 
F,|(37" —r,) forany k= 1,2, 5. 
In fact, 32” — ry = 0, and F,|(32° — r1). Let F,,|(3?" — rg). Then 
(3% —rpy1) = (8°)? — rest(rg) = (8)? = rf 
= a _ rp)(32 +r~) =0(mod F,), 


and it holds F,|(32) — rg+1). 
For k = 2", we have 32°" ' = am and it holds 


gk-1 


Fpl 


FAG re). 


Therefore, a ron(mod F;,), and we can use for the Pépin’s test 
the number ran, obtained as the last term of the sequence 


r, =3, ro =1r?(mod F,), r3 = r3(mod Fy), «.. ; 
r9n = r3n_1(mod Fy). 


This procedure makes the Pépin’s test a fast polynomial-time algo- 
rithm, if F;, is known. 


4.4.4. E. Lucas (1879) used this method for study of the number F%. 

This is the very method by which the numbers Fy (Morehead and 
Western 1905) and Fg (Morehead and Western, 1908), have been 
proved to be composite. 

However, Fermat numbers grow so rapidly that only a handful of 
Fermat numbers can be tested in a reasonable amount of time and 
space. 

Because of the sparsity of the Fermat numbers, the Pépin’s test 
has only been run eight times for Fermat numbers whose primality 
statuses were not already known. 
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Fermat numbers checked by Pépin’s test 


Fermat 
Year | Provers number | Pépin test result 


Morehead and Western composite 
Morehead and Western composite 
Robinson composite 
Paxson composite 
Selfridge and Hurwitz composite 


Buell and Young composite 


Crandall, Doenias, composite 
Norrie and Young 

Mayer, Papadopoulos composite 
and Crandall 


Note, that the method gives no information of the number into a 
product of two factors greater than 1. This is why we do not know 
any such decomposition of the number F29 and Fy. 

As of 2020, the smallest untested Fermat number with no known 
prime factor is F33, which has 2585827973 digits. 


4.4.5. Instead of the number 3 we can take any odd integer number 
k, such that the Legendre symbol (=) = —1. in particular, k can be 
equal to 5 or 10. 

In fact, as for any n > 2 it holds F,, = 1(mod 4), and F, = 
2(mod 5), we get for a prime number F,,, that 


()-(8)-@)=— 


On the same way, using in additional the congruence F;, = 1(mod 8), 


n > 2, we have 


10). (2 5 \ i Oo) (Pay. (2) i 
Ky} NG) \ ay By LS 3 
It is easy to check, that bases which can be used for the Pépin’s 


test, are 3, 5, 6, 7, 10, 12, 14, 20, 24, 27, 28, ... (sequence A129802 
in the OEIS). 
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The primes in the above sequence are called Elite primes, they are 
3, 5, 7, 41, 15361, 23041, 26881, 61441, 87041, 163841, ... (sequence 
A102742 in the OEIS). 


4.4.6. In fact, for Fermat numbers, Pépin’s test is the same as the 
Solovay—Strassen primality test. It is deterministic, since the Jacobi 
symbol (4) is equal to —1, i.e., there are no Fermat numbers which 
are Euler-Jacobi pseudoprimes to any base b listed above. 

On the other hand, the Pépin’s test is a particular case of the 
(deterministic) Lucas test. 

In 1878, a generalization of Pépin’s test, now called Proth’s the- 
orem, was obtained. (It is named after a French mathematician F. 


Proth.) 


Theorem (Proth’s theorem). Given n = h-2*+1, with h odd and 
h < 2", if there exists an integer a, such that ar = —1(mod n), 
then n is a prime. 

We get one of propositions of Pépin’s test for h = 1, and a = 3. 

Proth theorem is a primality test for Proth numbers, i.e., the 
numbers of the form h- 2* + 1 with h odd and h < 2". 

In the case of primality one obtains a Proth prime. This is a 
practical test because if p is prime, any chosen a has about a 50 % 
chance of working. 

The first Proth primes are 3, 5, 13,17, 41,97, 113, 193, 241, 257, ... 
(sequence A080076 in the OEIS). 

As of 2020, the largest known Proth prime (P. Szabolcs, 2016) 
is 110223 - 231177165 4 1. Tt has 9383761 digits. It is also the largest 
known non-Mersenne prime. 

In turn, the Proth’s theorem is a particular case of the Pocklington 
criterion (see Chapter 5, Section 5.5). 


Theorem (Pocklington criterion). Given n = h-q* +1 with 
q € P, gcd(h,q) = 1, and h < q*, if there exists an integer a, such 
that a’~! = 1(mod n), and ged(a" = —1,n)=1, then n is a prime. 
We get the Proth theorem in the simplest case q = 2. 
For additional proofs see Chapter 5, Section 5.5. See also 
[Buch09], [Carm19], [Dezal7], [DeKol13], [DeKol18], [Dick05], 
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[Kell20], [KLSO1], [Knut68], [Madd05], [Tsan10], [Sier64], [Step01], 
[Prim20], [Wiki20]. 


Exercises 


1. Prove, that the numbers 6,7, 12,14, 20,24,27,28 can be used as 
the base of the Pépin’s test. 


2. Prove, that the numbers 8,9, 10,11,13,15,17,18, 19, 21, 22, 23 
cannot be used as the base of the Pépin’s test. 


3. Check, that numbers f3 and Fy are primes, using the algorithm 
of the Pépin’s test. 


4. Prove, that numbers 3,5, 7,41 are elite primes. Prove, that there 
are no other elite primes less then 50. 


5. Check, that the Pépin’s test is a particular case of the Lucas 
primality test. 


6. Prove the Proth’ theorem. 
7. Prove the Pocklington criterion. 


8. Prove that the first Proth prime, which is not a Fermat number, 
is 18. 


9. Check the primality of 229 using the Pocklington criterion. 


4.5 Fermat numbers in the family 
of special numbers 


Fermat numbers and perfect numbers 


4.5.1. A positive integer n is called a perfect number, it is equal to 
the sum of its proper divisors, i.e., its positive divisors, excluding the 
number itself. In terms of the sigma function, it holds o(n) = 2n. 

The first perfect number is 6: it has divisors 1, 2 and 3 (excluding 
6 itself), and it holds 


1+2+3=6. 
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The next three are 28, 496, and 8128. 

Amicable numbers are two different positive integers n,m related 
in such a way that the sum of the proper divisors of each is equal to 
the other number. In terms of the sigma function, it holds o(n)—n = 
m, and o(m) —m=n, or a(n) = o(m) =n+™m. 

The smallest pair of amicable numbers is (220, 284). 

It can be proven (Luca, 2000), that 

e Fermat number cannot be a perfect number or part of a pair of 
amicable numbers. 


4.5.2. There exists a connection between even perfect numbers, Fer- 
mat numbers and so-called trapezoidal numbers. 

An positive integer is called a trapezoidal number, if it can be 
represented as some isosceles trapezoid. 

For example, a trapezoidal representation of 18 is given on the 
picture below. 


The first trapezoidal numbers are 5, 7, 9, 11, 12, 13, 14, 15, 17, 18, 
. (sequence A165513 in the OEIS). 
By definition, any trapezoidal number is a sum of two or more 
consecutive positive integers, greater than 1: 


Tr(n,k) =n+(n+1) + (w+2)4+---+(n+(k—-1)), nF 1, kF1. 


So, one obtains, that any trapezoidal number is a difference of two 
non-consecutive triangular numbers: 


Tr(n,k) =n+(n+1)+(n4+2)+---+(n4+(k-1)) 
=(14+24+---+(n+(k—1)))-(1+2+---+(n—-1)) 
ee eee eee 


Moreover, the above definition implies that any trapezoidal number 
is a particular case of polite number. 

In fact, a polite number is a positive integer that can be repre- 
sented as the sum of two or more consecutive positive integers. 
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So, if such polite representation starts with 1, we obtain a trian- 
gular number, otherwise one gets a trapezoidal number. 

The first polite numbers are 1, 3, 5, 6, 7, 9, 10, 11, 12, 18, 
(sequence A138591 in the OEIS). 

Obviously, a given positive integer can have several polite repre- 
sentations. In the case of 18, one more such representation is given 
below. 


The politeness of a positive integer number is the number of ways it 
can be expressed as a sum of consecutive positive integers. 

It is easy to show that 

e for any positive integer x, the politeness of x is equal to the 
number of odd divisors of x that are greater than one. 


In fact, suppose a number z has an odd divisor y > 1. Then 


y consecutive integers, centered on : (so that their average value is 


“), have x as their sum: 


x y-l Bi = 
g= | —-—- — ] 4-4 feet fi = 
y 2 y y 2 


Some of the terms in this sum may be zero or negative. However, if 
a term is zero, it can be omitted, and any negative terms may be 
used to cancel positive ones, leading to a polite representation for 
xz. The requirement that y > 1 corresponds to the requirement that 
a polite representation have more than one term. For instance, the 
polite number x = 18 has two non-trivial odd divisors, 3 and 9. It is 
therefore the sum of 3 consecutive numbers centered at 1 =6:18= 
5+6+ 7. On the other hand, it is the sum of 9 consecutive integers 
centered at 8 = 2:18 = (—3) +(—1) +0+14+2+3+4+45+6, or 
18=34+4+4+5+6. 

Conversely, every polite representation of x can be formed by 


this construction. If a representation has an odd number y of terms, 
then the middle term can be written as 7 and y > 1 is a non- 
trivial odd divisor of x. If a representation has an even number 21 of 
terms and its minimum value is m, it may be extended, in an unique 
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way, to a longer sequence with the same sum and an odd number 
y = 2(m-+1)—1 of terms, by including the (2m—1) numbers —(m—1), 
—(m — 2), ..., -1, 0, 1, ..., m—2, m—1. After this extension the 
middle term of the new sequence can be written as aC and y > 1 
is a non-trivial odd divisor of x. By this construction, the polite 
representations of a number and its odd divisors greater than one 


may be placed into an one-to-one correspondence, that completes 


the proof. 


From this consideration it follows, that the inpolite numbers, i.e., 
positive integers which are not polite, are exactly the powers of two. 

So, the first few inpolite numbers are 1, 2, 4, 8, 16, 32, 64, 128, 
256, 512, ... (sequence A000079 in the OES), and the politeness of 
the numbers 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, ... is 0, 0, 1, 0, 1, 1, 1, 0, 2, 
1, ... (sequence A069283 in the OEIS). 

Therefore, the only polite numbers that may be non-trapezoidal 
are the triangular numbers with only one non-trivial odd divisor, 
because for those numbers, according to the bijection described 
above, the odd divisor corresponds to the triangular representation 
and there can be no other polite representation. 

Thus, polite non-trapezoidal numbers must have the form of a 
power of two multiplied by a prime number. 

It is easy to show that there are exactly two types of triangular 
numbers with this form: 


e the even perfect numbers 2*-1(2* — 1) formed by the product of a 
Mersenne prime 2 —1 with half the nearest power of two; 


e the products 2k-1(2* +1) of a Fermat prime 2 +1 = 2?" +1 with 
half the nearest power of two. 


Indeed, if we have equality a = 2-1. » with odd prime 
number p, then n(n + 1) = 2" - p, and, hence, p|n(n +1). So, we get 
that either pln, or p|(n + 1). 


If pln, then, by elementary arguments, p = n and 2* = n +1. 


Therefore, it holds p = 2" — 1, ie., p is a Mersenne prime, and 
the corresponding triangular number 2*~!(2* — 1) is an even perfect 
number. 
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If p|(n +1), then, by elementary arguments, p= n+1 and 2+! = 
n. Hence, it holds p = 2'+! + 1, ie., p = 27" +1 is a Fermat prime, 
and the corresponding triangular number 2*—1(2* + 1) has the form 
g2"—192" 4.1), 
So, we have proven, that there are only three types of non- 


trapezoidal numbers: 


e the even perfect numbers 2k-1(2* — 1) formed by the product of a 
Mersenne prime 2" —1 with half the nearest power of two; 


e the products 2?"—!(2?" +1) of a Fermat prime 2?" +1 with half 
the nearest power of two; 


e powers of two, in particular, all numbers of the form M,, + 1, 
where M,, is the n-th Mersenne number, and all numbers of the 
form F, —1, where F,, is the n-th Fermat number. 


Some additional information see, for example, in [Dezal8], 
(JoLo99], [Luca00], [Smit97], [Hons91]. 


Fermat numbers and Pascal’s triangle 


4.5.3. The Gauss—Wantzel theorem states, that an n-sided regular 
polygon can be constructed with compass and straightedge if and only 
if n is the product of a power of 2 and distinct Fermat primes. 

Since there are exactly 5 known Fermat primes, we know exactly 
31 numbers that are products of distinct Fermat primes, and hence 
31 constructible odd-sided regular polygons. 

They are 3, 5, 15, 17, 51, 85, 255 , 257, 771, 1285, 3855, 4369, 
13107, 21845, 65535, 65537, 196611, 327685, 983055, 1114129, 
3342387, 5570645, 16711935, 16843009, 50529027, 84215045, 
252645135, 286331153, 858993459, 1431655765, 4294967295 
(sequence A045544 in the OEIS). 

These numbers, when written in binary, are equal to the first 32 
rows of the modulo 2 Pascal’s triangle, minus the top row, which 
corresponds to a monogon. Because of this, the unities in such a list 
form an approximation to the Sierpinski triangle. 
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This pattern breaks down after this, as the next Fermat number 
is composite. On the first picture one can see the algorithm of this 
construction. 


modulo 2 base 2 
= 1g =1 
ca = llg =1-241=3 
= 10lg =1-274+0-241=5 
=“ 11lllg =1-23 41-22 41.241=15 
+ 100019 =1-2440-234+0-224+0-.241=17 


lil 


On the second picture several additional rows of the Pascal’s triangle 
modulo 2 are represented. 


i 1 ~ 

1 0 1 ae 

i i 1 1 S45 

1 0 0 0 1 245 

1 1 0 0 1 1 ars 

1 Oo 1 0 1 0 1 =e 
1 i 1 i 1 1 1 i Ce 


For other connections between Fermat numbers (as well as gen- 
eralized Fermat numbers) and Pascal’s triangle see Chapter 8. 

For some additional information see, for example, {[Bond93]}, 
[Deza17], [Deza18], [DeMo10], [KLSO1], [Madd05], [Tsan10], [Sier64], 
[Uspe76]. 


Generalized Fermat numbers 


4.5.4. There are several possibilities to construct some generaliza- 
tions of Fermat numbers. 
So, numbers of the form 


Fi(ab)=e" +6" 


with positive coprime integers a and 6, such that a > 6, are called 
generalized Fermat numbers. 

Unfortunately, this construction is too large. In fact, it is easy to 
show, that 

e an odd prime p is a generalized Fermat number F,,(a,b), n> 1, 
if and only if p is congruent to 1 modulo 4. 
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Indeed, it is well-known, that an odd prime p is represented as a 
sum of two perfect squares if and only if p = 1(mod 4). If p = x?+y?, 
it holds that x and y are positive coprime integers, such that x > y, 
and one can write that p = F)(z, y). 

Here we consider only the case n > 1, so 3 = 9° +1 is nota 
counterexample. 


4.5.5. It is more convenient to consider numbers F;,(a,b) only with 
b= 1. By analogy with the ordinary Fermat numbers, it is common 
to write generalized Fermat numbers F;,(a,1), i-e., numbers of the 
form a?" +1, as F,,(a). For example, 


F,(10) = 10?" + 1 = 10000000000000001. 


If F;,(a) = a?" + 1 is a prime, it is called a Fermat prime to base a. 

Generalized Fermat numbers F;,(a) can be prime only for even 
a, because if a is odd then every generalized Fermat number will be 
divisible by 2. 

If we require n > 1, then Landau’s fourth problem “are there 
infinitely many primes p such that p—1 is a perfect square?” asks if 
there are infinitely many generalized Fermat primes F;,(a). 

For the base 4, the generalized Fermat number F;,(4) = F413 so, 
there exist exactly four known generalized Fermat primes to base 4; 
they are FP = 5, Fh = 17, F3 = 257, and Fy = 65537. 

Similarly, there exist exactly three known generalized Fermat 
primes to base 16. 

For the base 6, there exist exactly three known generalized Fermat 
primes F,,(6); they are Fo(6) = 7, F\(6) = 37, and F4(6) = 1297. 

Obviously, there are no generalized Fermat primes F;,(8) to base 
8: any number of the form 8“ + 1, k > 1, is divisible by 3. 

In general, if a@ is a perfect power with an odd exponent, then all 
generalized Fermat numbers F;,(a), n > 1, can be algebraic factored, 
so they cannot be primes. 

For the base 10, there exist exactly two known generalized Fermat 
primes F;,(10); they are Fo(10) = 11, and F2(10) = 101. 

The smallest prime number F;,(a) with n > 4 is F5(30): 


F5(30) = 30? +1 
= 185302018885184100000000000000000000000000000001. 
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For n = 0,1,2,3,..., the smallest bases a such that F),(a) = a?" +1 
is prime are 2, 2, 2, 2, 2, 30, 102, 120, 278, 46, ... (sequence A056993 
in the OEIS). 

In fact, the numbers oe ae 1, 2) 4 1, ge 4 1, ge 4 1, gz 4 1, 
302° + 1, 1022" + 1, 1202” + 1, 2787° + 1, 462” + 1 are primes. 

For n = 1,2,3,..., the smallest k such that (2n)* +1 is prime are 
1, 1,1, 0,1, 1, 2, 1, 1, 2, .... (sequence A079706 in the OEIS; see also 
A228101, and A084712). 

The following table gives a list of the 5 largest known generalized 
Fermat primes F;,(a). They are all megaprimes. Each of them was 
discovered by participants in the PrimeGrid project. 


The largest known generalized Fermat primes 


[Prime number [Notation [Number of dite] Year 


+ 1]F 9 (1059094) 6317602 
2 fies +1} Fo9(919444) 6253210 


3} 3214654524288 + 1 | F19(3214654) 3411613 
4} 2985036°2488 + 1 | F,9(2985036) 3394739 
2877652924288 + 1 | F\9(2877652) 3386397 


On the Prime Pages one can find the current top 100 generalized 
Fermat primes. 


4.5.6. There are many properties of generated Fermat numbers 
F,,(a), which are similar to the corresponding propreties of F;,. So, 
e any prime divisor of F,(a) = a2" +1 has the form k-2™+1 
with odd k andm > n. 
Moreover, the different numbers F;,(a) and F;,(a) are coprime: 
e gcd(F,,(a), Fm(a)) =1 forn#m. 
However, for different bases it is not true. For example, 641 
divides 1016 + 1, 20°? + 1, and 40° + 1. 


4.5.7. Besides, a half generalized Fermat number to an odd base a 
is defined as af tt. 
It is expected that there will be only finitely many half generalized 


Fermat primes for each odd base. 
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4.5.8. A Mersenne—Fermat number MF(p,r) is defined, for a posi- 
tive integer r and a prime p, as 

ap" — 1 
When r = 1, it is a Mersenne number. When p = 2, it is a Fermat 
number. 


MF(p,r) = 


The only known Mersenne—Fermat primes with r > 1 are 
MF(2,2), MF(2,3), MF(2,4), MF(2,5), MF(3,2), MF(3,3), 
MF‘(7,2), and MF(59, 2). 

For some additional information see, for example, {[Bond93], 
[Buch09], [Carm19], [Dezal7], [Dezal8], [DeKol8], [KLSO1], 
[Land09], [Madd05], [Tsan10], [Sier64], [SIP195], [Sloa20], [Prim20], 
[Wiki20]. 


Exercises 


1. Prove, that any Fermat number is a palindromic number in 
binary. 


2. Prove, that the sequence of binary palindromic primes begins 
(in binary) from 11, 101, 111, 10001, 11111, 1001001, 1101011, 
1111111, 100000001, 100111001, ... (sequence A117697 in the 
OEIS) and contains all Mersenne primes and Fermat primes. 


3. Find the first five trapezoidal numbers; the first five non- 
trapezoidal numbers; first five numbers of the form 2”~!(2" +1), 
where 2” — 1 is a prime. Find all possible intersections of the 
obtained sets. 


4. Construct the first 32 rows of Pascal’s triangle. Construct the 
first 32 rows of Pascal’s triangle modulo 2. Find in the obtained 
construction Fermat numbers; perfect numbers: Mersenne num- 
bers. 


5. Find all generalized Fermat primes F;,(a) with 1 < n < 4, and 
a < 30. 


6. Prove, that any generalized Fermat number F;,(a) with a = 8 is 
composite. Check the similar statement for a = 64; for a = 216. 


190 Mersenne Numbers and Fermat Numbers 


7. Prove, that any generalized Fermat number F;,(a) with a = 4 is 
a Fermat number. Check the similar statement for a = 16; for 
a = 256. 


8. Prove, that Mersenne-Fermat number M F'(p,r) is a Mersenne 
number for r = 1. 


9. Prove, that Mersenne-Fermat number MF‘(p,r) is a Fermat 
number for p = 2. 


10. Check, that numbers MF'(2,2), MF(2,3), MF(2,4), MF(2,5), 
MF(3,2), MF(3,3) and MF‘(7, 2) are primes. 


4.6 Open problems 


There exist many open problems relating to Fermat numbers. In this 
section we consider the most important of them. 


Finiteness of the set of Fermat primes 


4.6.1. First of all, mathematicians are interested in the main ques- 
tion, concerning to the Theory of Fermat numbers: 

e if there exist infinitely many Fermat primes? 

On the othe hand, we need to get an answer to the following 
question: 

e if there exist infinitely many Fermat composite numbers? 

However, there exists a really simple question that has not yet 
been answered: 

e is there at least one Fermat prime greater than Fy? 

Heuristic reasons suggest that there is only a finite number of 
Fermat primes. 

Indeed, by the Prime number theorem, it holds that the number 
m(x) of primes, less than or equal to the given positive real num- 
ic: =} So, the n-th prime number 
is approximatively equal to nlogn (more exactly, cnlnn < pp < 
Cnlnn, where C > c > 0 are some positive absolute constants). 


ber x, is approximatively equal to 


Then we can guess the probability of a “random” number n to be 
A 


inca for some positive absolute constant A. 


prime is at most 
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So, summing 


A 2 A 
log F, = 2” log 2 


over the non-negative integers n, we should expect at most Fer- 


mat primes, as 


a 2 


> =1+<- stot ote ed 
So, the number of Fermat primes is bounded by the constant ee: 
This argument is not a rigorous proof. Here we assume that Fer- 
mat numbers behave enough like random numbers to make the above 
argument. But they are not random numbers; for example, they have 
special divisibility properties. 


4.6.2. Many years there existed conjecture about primality of all 
numbers of the form 


2 
241, 2241, 2% 41, 22> 41, 


It was disproved in 1953, when it was shown by J. Selfridge, that 
the number F\¢ (having 19729 decimal digits) is composite; it has a 
prime divisor 1575 - 28 + 1 = 825753601. 


4.6.3. W. Sierpiriski (1958) introduced the numbers 
Sn =n" +1, ne N\{I}. 


He proved that if the number S, is a prime, then n = oo i.e., Sy is 
a Fermat number: 


Sn = £m+2™. 


Primes of this form are very rare. In fact, there are only two such 
primes that do not exceed 3-10!?: for m = 0, 1 we get primes F, = 5 
and F3 = 257, for m = 2, 3, 4, 5 we get the composite numbers Fé, 
Fy, Fo, £37; for m = 6 we get the number Fy, which already has 
more than 3 - 107° decimal digits. 

However, the open question is 

e if there are infinitely many prime numbers of the form n” + 1? 
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If the set of primes of the form n" + 1 is finite, there exist infinity 
many composite Fermat numbers. 


4.6.4. Mathematicians study also the sequence 
Gey = By 2-1, m> 0. 


It is easy to see, that the numbers Gp = 11, G; = 79, and Gg = 
1114111 are primes. The number G3 is also prime. 

So, it was conjectured (1968) that all numbers of this form are 
primes. 

However, W. Keller (1992) showed that G4, having 19734 decimal 
digits, is composite; it is divided by 16267. 

The open question is 

e what if there are infinitely many of such prime numbers (at 
least, one more prime of this form)? 


Other open questions 


4.6.5. Still open is also the question 

e if any Fermat number is squarefree? 

It is easy to show that if the square of a prime number p divides 
Fermat number, then 


2?-1 = 1(mod p?). 


That is, the number p is a Wieferich prime. 

Although the congruence 2?~! = 1(mod p) takes place for all odd 
primes p (due to the Fermat’s little theorem), Wieferich congruence 
is very rare. 

Only two such primes, 1093 and 3511, are known up to 4: 10”. 
The first of them was discovered by W. Meissner (1913), and the 
second by N.G.W.H. Biger (1922). 

For the primes 1093 and 3511, it was shown that neither of them 
is a divisor of any Fermat number. 


4.6.6. A Siterpiriski number is defined as an odd natural number k 
such that k- 2’ + 1 is composite for all natural numbers m. 
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It is proven (Sierpiriski, 1960), that there are infinity many of 
Sierpinski numbers. 

The sequence of currently known Sierpinski numbers begins with 
78557. 

The number 78557 was proved to be a Sierpinski number by J. 
Selfridge in 1962. 

No smaller Sierpitski numbers have been discovered. 

The Sierpinski problem asks for the value of the smallest Sierpinski 
number. 

In private correspondence with P. Erdos, J. Selfridge conjectured 
that 78557 was the smallest Sierpinski number. 

It is now believed that 78557 is indeed the smallest Sierpinski 
number. 

Some additional information see, for example, in [Buch09], 
[DeKo13], [Guy94]. For some additional information see, for exam- 
ple, [Carm19], [Dezal7], [Dezal8], [DeKol13], [Dick05], [Kell20], 
[KLSO1], [Madd05], [Shan93], [Tsan10], [Sier64], [Prim20]. 


Exercises 
1. Prove the infiniteness of primes, using Fermat numbers. 


2. Prove the infiniteness of primes in the arithmetic progression 4k + 
1, using Fermat numbers. 


3. Using Fermat numbers, prove that p, < F,_5 for n > 7, where pp, 


is the n-th prime number. 
4, Prove that m(x) > logy logy x + 4 for x > 17. 


5. Prove the infiniteness of primes in the arithmetic progressions 
2k4+1;4k+1; 8+ 1; 16441. 


6. Prove the infiniteness of primes in the arithmetic progressions 
6k + 1; 18k + 1; 54k +1. 


7. Check, that Fermat numbers Fo, ..., & are not Wieferich primes. 


8. Prove, that any prime number of the form n” + 1 is a Fermat 
prime. 
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Chapter 5 
Modern Applications 


5.1 On place of prime numbers in 
Mathematics 


5.1.1. The central importance of prime numbers to Number Theory 
and Mathematics in general stems from the fundamental theorem of 
Arithmetics. 

This theorem states that every integer larger than 1 can be written 
as a product of one or more primes. More strongly, this product is 
unique in the sense that any two prime factorizations of the same 
number will have the same numbers of copies of the same primes, 
although their ordering may differ. Primes can thus be considered 
the “basic building blocks” of the natural numbers. 

Many conjectures revolving about primes have been posed. Often 
having an elementary formulation, many of these conjectures have 
withstood proof for decades. 

One of them is the Goldbach’s conjecture, which asserts that every 
even integer n greater than 2 can be written as a sum of two primes. 

The branch of number theory studying such questions is called 
the Additive Number Theory. 

Another type of problem concerns prime gaps, the differences 
between consecutive primes. 

The distribution of primes in the large, such as the question how 
many primes are smaller than a given x, is described by the Prime 
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number theorem, but no efficient formula for the n-th prime number 
is known. 

The Dirichlet’s theorem on arithmetic progressions asserts that 
linear polynomials a+ bn with relatively prime integers a and b take 
infinitely many prime values. 

But prime numbers are more than just mathematical oddities. 
They have become extremely important in Cryptography because it 
is difficult to factor a large composite number into primes. 

In fact, for general numbers that are few hundred decimal digits 
long, factorization is nearly impossible; this gave rise to the RSA 
cryptosystem. 

In this section we consider the most important facts of the math- 
ematical Theory of prime numbers. 


Distribution of prime numbers 


5.1.2. Well-known is the irregularity of the distribution of prime 
numbers on the number line. 

The existence of arbitrarily large prime gaps can be seen by ele- 
mentary arguments. In fact, 

e for a given N, there exists an interval of length N which does 
not contain prime numbers. 
It is easy to see, that all the numbers (V+1)!+k,2<k< 
(N+1)!+(N+1), are composite. The number (N+1)!+2 is divisible 
by 2, (N + 2)!+ 3 is divisible by 3, .... (WN +1)!+(N + 1) is divisible 
by (NV + 1). 


5.1.3. On the other hand, in the list of primes you will quite 
often see two consecutive odd prime numbers: 3 and 5, 5 and 7, 
11 and 138, 17 and 19, ... We call these pairs of primes num- 
bers (p,p + 2) twin primes. This name was coined by Stackel in 
1916. 

The first such pairs are: (3, 5), (5, 7), (11, 13), (17, 19), 
(29, Sl), (Al, 43), (59, 61), (As. 73), (01, 103), (107, 109), 2: 
(sequence A077800 in the OEIS). 

A question to which the answer is not known is 

e@ whether there exist infinitely many twin primes. 
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R.P. Brent, 1976, has found that there are 152892 pairs of twin 
primes less than 10!!. 

The greatest known pair of twin primes is the pair 2996863034895. 
1290000 + 1 (2016). It has 388342 digits. 


5.1.4. Another question to which the answer is not known is 

e whether there exist infinitely many primes p for which p,p + 2, 
p+6 and p+8 are all prime numbers. 

The first six consecutive quadruplets are obtained for p = 
5, 11,101, 191,821, 1481. 

As of 2020, the largest known prime quadruplet (Kaiser, 2019) 
has 10132 digits and starts with 


p = 667674063382677 - 238608 _ 1, 


For more information see Chapter 2, section 2.6. Moreover, see, 
for example, [Buch09], [Dezal7], [DeKo13], [DeKo18], [Dick05], 
[Ingh32], [Ore48], [Prim20], [Wiki20]. 


Prime number theorem 


5.1.5. For any positive real number z, let the prime counting func- 
tion (a) be the number of primes not greater than z: 


az) = » 1; 


pSu 


We have, that a(1) =0, a(2) = 1, 2(8) =a(4) = 2, «(5) = a(6) = 3, 
..., 7(100) = 25, 7(1000) = 168, 7(10000) = 1229, 7(10°) = 9592, 
m(10°) = 78498, 7(10’) = 664579, (10°) = 5761455, (10°) = 
50847534. 

In 1972, J. Bohmann calculated that 7(101°) = 455052511. In 
1985, J.C. Lagarias, V.S. Miller and A.M. Odlyzko have computed 
the value 7(10!°) = 27923834033925. The value 


m(10°") = 16352460426841680446427399 


was published in 2015 by D. Baugh and K. Walisch. 
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Obviously, we have that 
T( Py) =: 
From the Fuclid’s theorem it follows, that 
T(x) 400, as ZOO. 
L. Euler, 1737, considered the series 
iL 


1 1 1 
Ca) =A egh ger ee =D) for seR, s>1. 


oe) 


n=1 
He evaluated the sums ¢(2k) for every k > 1; in particular, he 


obtained the values 
4 


2 
(=, and ¢(4) ==. 


Euler noticed, that for real s > 1 it holds 


ete 
a -TI(: +otoet -) = II (1-=) 
peP peP 
Due to this observation he gave an analytic proof of the infiniteness 
of prime numbers (see Chapter 2, section 2. ze 
Moreover, he proved that the sum y peP Ps of the inverses of the 
prime numbers is divergent. More exactly, that 


Ss - = log log x + O(1). 
Euler also proved that 
a(x) =o0(x), ie, lim ae) =), 
5.1.6. Later C.F. Gauss, 1792, had conjectured that there exists an 
asymptotic formula for the function 7(z): 
(x) ~ a as Z— 00. 


log x 
Later he refined this estimate to 


* du 
n(v) ~ f ieee 


C.F. Gauss did not publish this result, which he first mentioned in 
1849 (in a letter to J.F. Encke). It was subsequently posthumously 
published in 1863. 
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The logarithmic integral Li(n) =f," i has the asymptotic 
expansion about of 
(oe) 
kiln n n an 
Li = SO —— —— wae 
an) DS (Inn)Ft+1 = Inn ar (Inn)? 13 (Inn)? 7 


k=0 
and taking the first three terms has been shown to be a better esti- 
mate than alone. 
A.-M. Legendre, 1808, conjectured a similar result: 
x 
™(2) ~ Oee 1.08300" 


5.1.7. First essential success in this problem was obtained by P.L. 
Chebyshev in 1850. He found the following boundaries for the func- 
tion m(x): 


x x 

a: — <7(x) < b- —, 

log x log x 
91/231/351/5 


where x > 2,a= , and b= Sa; hence, the new boundaries 


301/30 
for n-th prime number p,, were found: 


0.91-nlogn < py, < 1.7-nlogn. 


P.L. Chebyshev proved also well-known Bertrand’s Postulate: if 
n is a natural number > 1 then between n and 2n there is at least 
one prime number. 


5.1.8. The fundamental contribution to further investigations on the 
problem of distribution of primes was made by B. Riemann in 1859. 
He returned to the Euler’s proof of infiniteness of primes and intro- 
duced the function 


oe) 


1 | Cr eer re: | 
= 2a ne = ve —+—+—4+---—4+-:-:- 
nm 


as a function of a complex variable s = 0 + it, a > 1. This sum 
absolutely convergent for Res = ao > 1 and represents an analytic 
function in this region. B. Riemann showed that ¢(s) is analytically 
continuable on the whole complex plane, and has a simple pole with 
the residue 1 at the point s = 1. 
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Moreover, B. Riemann showed that the zeta-function satisfies a 
functional equation from which it follows that it has zeros at 


$= —2,—4,...,—2n,... 


(so called trivial zeros), and that all other zeros lie in the strip 0 < 
Res <1, so called critical strip. 

The Riemann Hypothesis asserts that all the non-trivial zeros of 
the zeta-function actually lie on the line Res = a which is called 
critical line. The conjecture currently remains unproven. 

Numerical computations have been made to check the Riemann 


Hypothesis for the first 1.5 - 10° zeros. 


5.1.9. B. Riemann first realized the connection between the distri- 
bution of primes and the distribution of the non-trivial zeros of the 
zeta-function. Further progress led to proving of the Prime number 
theorem in 1896, independently by J. Hadamard and Ch.J. de la 
Vallée Poussin: 


x g : . 1 (ax) 
= —_ —— 6, - 1 =1 
e mr to(). ne ato x/log« 
The main part of the proof was establishing that ¢(1 + it) 4 1 for 
any tE R. 
More exactly, Vallée Poussin (1899) showed that, for some con- 
stant a, it holds 


n(2) = Li(e) +O (ev) . 


In 1901, H. von Koch showed that if the Riemann Hypothesis is 
true, then 


n(x) = Li(z) + O(/zlnz), 
which can be rewritten in the slightly weaker form as 
n(x) = Li(x) +O (xt?) 


So, from the Riemann Hypothesis we can obtain good estimation 
for 7(x) with an error term of the order ,/z. The best bounds known 
today are far from this result. 
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The logarithmic integral Li(x) is larger than a(x) for “small” 
values of x. However, in 1914, J.E. Littlewood proved that this is 
not always the case. The first value of x where (a) exceeds Li(x) is 
around g= 10". 

As a consequence of the Prime number theorem, one gets an 
asymptotic expression for the n-th prime number: 


Pn ~ ninn. 
A better approximation is 


Pn =ninn+nInInn+O (—mmn) : 
nn 


5.1.10. In the first half of the XX-th century, some mathematicians 
felt that there exists a hierarchy of techniques in Mathematics, and 
that the prime number theorem is a “deep” theorem, whose proof 
requires the Complex Analysis. Methods with only real variables 
were supposed to be inadequate. G.H. Hardy was one notable mem- 
ber of this group. 

The formulation of this belief was somewhat shaken by a proof of 
the Prime number theorem based on the Wiener’s tauberian theorem, 
though this could be circumvented by awarding Wiener’s theorem 
“depth” itself equivalent to the complex methods. 

However, P. Erdés and A. Selberg found a so-called “elementary” 
proof of the Prime number theorem in 1949. This proof uses only 
number-theoretical means. The Selberg-Erdés work effectively laid 
rest to the whole concept of “depth”, showing that technically “ele- 
mentary” methods were sharper than previously expected. 

Subsequent development of sieve methods showed they had a def- 
inite role in the Theory of prime numbers. 

For references and some additional information see, for example, 


[Chan70], [Ingh32], [Ivic85], [Kara83], [KaVo92], [MaSt15], [Titc87]. 


Exercises 


1. Find 7(100), (50), m(logg121), (pi3) m(pi7); m(pi7 — 1); 
™(pi7 +1). 


2. Prove, that 7(x) > log, logs x. 
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. Prove, that (x) > logy log, x +4 for any x > 17. 

. Prove, that 7(x) = o(@) as © > oo. 

. Prove, that there are no triples (p,p+2,p+4) of prime numbers. 
. Find first five pairs of cousin primes (p,p + 4). 


ND Oo FF W 


. Find all twin prime pairs, in which one number is a Mersenne 
prime, and another is a Fermat prime. 


5.2 Problems in Number Theory, 
connected with Mersenne 
numbers 


Mersenne numbers and perfect numbers: 
history of the question 


The Euclid—Euler theorem is a theorem in Mathematics that relates 
perfect numbers to Mersenne primes. It states that an even number 
is perfect if and only if it has the form 2?-!(2? —1), where 2? — 1 is 
a prime number. The theorem is named after Euclid and L. Euler. 


5.2.1. In Number Theory, a perfect number is a positive integer that 
is equal to the sum of its positive divisors, excluding the number 
itself. For instance, 6 has divisors 1, 2 and 3 (excluding itself), and 
1+2+3=6, so 6 is a perfect number. 

This definition is ancient, appearing as early as Euclid’s Elements 
(VII.22), where it is called perfect, ideal, or complete number. 

The first few perfect numbers are 6, 28, 496 and 8128 (sequence 
A000396 in the OEIS). 

In about 300 BC Euclid proved that 2?~!(2?—1) is an even perfect 
number whenever 2? — 1 is prime (Elements, Proposition IX.36). 

Two millennia later, L. Euler proved that all even perfect numbers 
are of this form. This is known as the Euclid—Euler theorem. 

The first four perfect numbers were the only ones known to early 
Greek Mathematics. 
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Nicomachus noted 8128 as early as around AD 100. He stated also 
(without proof) that every perfect number is of the form 2”—!(2"—1), 
where 2” — 1 is a prime. 

Philo of Alexandria in his first-century book On the creation 
mentioned perfect numbers, claiming that the world was created 
in 6 days and the moon orbits in 28 days because 6 and 28 are 
perfect. 

Origen added the observation that there are only four perfect 
numbers that are less than 10000. 

St. Augustine considered perfect numbers in City of God (Book 
XI, Chapter 30) in the early V-th century AD, repeating the claim 
that God created the world in 6 days because 6 is the smallest perfect 
number. 

In XII-th century, the Egyptian mathematician Ismail ibn Fallus 
mentioned the next three perfect numbers (33550336, 8589869056, 
and 137438691328) and listed a few more which are now known to 
be incorrect. 

The first known European mention of the fifth perfect number is 
a manuscript written between 1456 and 1461 by an unknown math- 
ematician. 

In 1588, the Italian mathematician P. Cataldi identified the sixth 
(8589869056) and the seventh (137438691328) perfect numbers, and 
also proved that every perfect number obtained from Euclid’s rule 
ends with a 6 or an 8. 

Although Nicomachus had stated that all perfect numbers were 
of the form 2”—!(2” — 1), where 2” — 1 is prime, it was not until the 
XVIII-th century that L. Euler proved that the formula 2?—!(2? — 1) 
will yield all the even perfect numbers. 

An exhaustive search by the GIMPS distributed computing 
project has shown that the first 47 even perfect numbers are 
2°-1(2P — 1) for p = 2, 3, 5, 7, 18, 17, 19, 31, 61, 89, 107, 127, 521, 
607, 1279, 2203, 2281, 3217, 4253, 4423, 9689, 9941, 11213, 19937, 
21701, 23209, 44497, 86243, 110503, 132049, 216091, 756839, 859433, 
1257787, 1398269, 2976221, 3021377, 6972593, 13466917, 20996011, 
24036583, 25964951, 30402457, 32582657, 37156667, 42643801 and 
43112609 (sequence A000043 in the OEIS). 
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Four higher perfect numbers have also been discovered, namely 
those for which p = 57885161, 74207281, 77232917, and 82589933, 
though there may be others within this range. 

As of December 2020, 51 Mersenne primes, and _ therefore, 
51 even perfect numbers are known. The largest of them is 
282589932 (982589933 _ 1) with 49724095 digits. 

It has been conjectured that there are infinitely many Mersenne 
primes. 

Although the truth of this conjecture remains unknown, it is 
equivalent, by the Euclid—Euler theorem, to the conjecture that there 
are infinitely many even perfect numbers. 

However, it is also unknown whether there exists even a single 
odd perfect number. 

In fact, odd perfect numbers either do not exist or are rare. There 
are a number of results on perfect numbers that are actually quite 
easy to prove but nevertheless superficially impressive; some of them 
obviously come under Richard Guy’s strong law of small numbers. 

Some additional information see, for example, in [Dezal7], 
[Deza18], [Dick05], [Prim20]. 


Proof of the Euclid—Euler theorem 


5.2.2. The sum s(n) of divisors of a number n, excluding the number 
itself, is called its aliquot sum, so a perfect number is one that is equal 
to its aliquot sum: s(n) =n. 

Equivalently, a perfect number is a number that is half the sum 
of all of its positive divisors including itself; in symbols, 


o(n) =2n, where o(n) = ie 
din 


For instance, 28 is perfect as 1+2+4+7+14+4 28 = 56 = 2-28. 

The Euler’s proof depends on the fact that the sum of divisors 
function o(n) is multiplicative; that is, if @ and b are any two rela- 
tively prime integers, then 


a(a-b) =oa(a)-a(b). 
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For this formula to be valid, the sum of divisors of a number must 
include the number itself, not just the proper divisors. 


5.2.3. Consider the Euclid’s part of the theorem (sufficiency): 
e any number 2*-1(2* —1) with a prime number 2" —1 is a perfect 
number. 


The part already proved by Euclid immediately follows from 


the multiplicative property: every Mersenne prime gives rise to an 
even perfect number. When 2? — 1 is prime, 


o(2P ho? =1)) =a (Po? = 1). 


The divisors of 2?! are 1,2,4,8,...,2?-'. The sum of these divisors 
is a geometric series whose sum is 2? — 1. 

Next, since 2? — 1 is prime, its only divisors are 1 and itself, so 
the sum of its divisors is 2?. 

Combining these, 


oar" (0? = 1) Sn oP = 1) 
= (2? — 1)(2?) 
= 9(2°-1)(2? — 1). 


Therefore, 2?~!(2p — 1) is perfect. 


5.2.4. Consider the Euler’s part of the theorem (necessity): 

e if n is an even perfect number, then it has the form n = 
2k-1(2k 1), where 2*-—1€ P. 
In this direction, suppose that an even perfect number has been 
given, and partially factor it as 2*x, where x is odd. 

For 2'x to be perfect, the sum of its divisors must be twice its 


value: 
ght = @(2"e) = (2°) = 1e(z). 


The odd factor 2*+! — 1 on the right side is at least 3, and it must 


divide x, the only odd factor on the left side, soy = sy, 1s a 
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proper divisor of x: 
a = (2**1 — 1)y. 


The factor 2+! on the left side must divide o(), the only even 
factor on the right side, so 


o(a 
y= ot) 
is a proper divisor of a(x): 
a(x) = 2Ft ly, 


Dividing both sides of by the common factor 2'+! — 1 gives 


gktly = o(2). 
Taking into account the known divisors x = (2**+! — 1)y and y of x 
gives 


o(a) > y+a=y+ (2**1 — dy, 


For the equality above to be true, there can be no other divisors 
of x. Therefore, y must be 1, and x must be a prime of the form 
orb, 
Some additional information see, for example, in [Buch09], 
[DeKo13], [Deza17], [Deza18], [Dick05], [Sier64], [Step01]. 


Properties of perfect numbers 


5.2.5. As well as having the form 2?~!(2? — 1), each even perfect 
number is the (2? — 1)-th triangular number, and, hence, is equal to 
the sum of the integers from 1 to 2? — 1: 


gP-l(oP — 1) = §3(2? — 1) =14+9434---4 (2? =1). 
Similarly, 2?~!(2? — 1) is the 2?~!-th hexagonal number: 
gP-1(2P — 1) = Sg(2°). 


However, the even perfect numbers are not trapezoidal numbers 
(see Chapter 4, section 4.5); that is, they cannot be represented as 
the difference of two positive non-consecutive triangular numbers. 
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Furthermore, each even perfect number except for 6 is the (>)- 
th centered nonagonal number and is equal to the sum of the first 
re 


2 zs odd cubes: 


6=2)(2?-1) =1+2+43, 
Baro, wit e444) 4927S1r 43". 
HOG =O°(22 1) STO ge hOG 4 3 oT 
= 13433 4534 73, 
8128 = 28(27-1)  - =14+243+---+1254+126+127 
=1° 43° +574 77 40° 211° 413° 
4+ 153, 


33550336 = 24213 —1) =1+24+3+---+8189 + 8190 + 8191 

= 1° +39 45° +--- + 123% + 125% + 127°. 
5.2.6. A pernicious number is a positive integer such that the Ham- 
ming weight of its binary representation (i.e., the sum of binary dig- 
its) is prime. 

The first pernicious number is 3, since 3 = 1lp and 1+1 = 2, 
which is a prime. The next pernicious number is 5, since 5 = 1019, 
followed by 6, 7 and 9 (sequence A052294 in the OEIS). 

Owing to their form, 2?~'(2? — 1), every even perfect number is 
represented in binary form as p ones followed by p — 1 zeros; for 
example, 


619 = 2? + 2! = 1109; 
2819 = 2° + 2° + 2? = 111009; 
A9619 = 28 + 27 + 26 4 95 + 24 = 1111100009; 
812819 = 2 4. ot tO 499 4 08 4 OF 4 08 = 1111111000000... 
Thus, every even perfect number is a pernicious number. 


5.2.7. A practical number (or panarithmic number) is a positive inte- 
ger n such that all smaller positive integers can be represented as 
sums of distinct divisors of n. 
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For example, 12 is a practical number because all the numbers 
from 1 to 11 can be expressed as sums of its divisors 1, 2, 3, 4, and 
6: as well as these divisors themselves, we have 


5=3+2,7=641, 8=642, 
9=64+3, 10=64+341, 11=64342. 


The sequence of practical numbers begins 1, 2, 4, 6, 8, 12, 16, 18, 20, 
24, ... (sequence A005153 in the OEIS). 

It is easy to show, that every even perfect number is also a prac- 
tical number. 


5.2.8. An Ore number (or harmonic divisor number) is a positive 
integer whose divisors have a harmonic mean that is an integer. 

The harmonic mean can be expressed as the reciprocal of the 
arithmetic mean of the reciprocals of the given set of observations. 

As a simple example, the harmonic mean of the four divisors 1, 
2, 3, 6 of 6 is an integer: 

. =2 
ares 

The first Ore numbers are 1, 6, 28, 140, 270, 496, 672, 1638, 2970, 
6200, 8128, 8190, ... (sequence A001599 in the OEIS). 

In fact, the reciprocals of the divisors of any perfect number n 
must add up to 2. To get this, take the definition of a perfect number, 
a(n) = 2n and divide both sides by n. 

So, for 6 and 28, we have 


re ae es 
ae aie 
oe a ae ee ee 
Moreover, the number of divisors of a perfect number n (whether 
even or odd) must be even, because n cannot be a perfect square. 
From these two results it follows that every perfect number is an 
Ore number. 
Some additional information see, for example, in [Buch09], 


[Deza17], [Deza18], [Sier64], [Step01], [Wiki20). 
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Generalizations of perfect numbers 


5.2.9. The sum of proper divisors gives various other kinds of 
numbers. 

Numbers where the sum is less than the number itself are called 
deficient, and where it is greater than the number, abundant. These 
terms, together with perfect itself, come from Greek Numerology. 

The first few deficient numbers are 1, 2, 3, 4, 5, 7, 8, 9, 10, 11, ... 
(sequence A005100 in the OEIS), while the first few abundant num- 
bers are 12, 18, 20, 24, 30, 36, 40, 42, 48, 54, ... (sequence A005101 
in the OEIS). 

A pair of numbers which are the sum of each other’s proper 
divisors are called amicable, and larger cycles of numbers are called 
sociable. 

The first few amicable pairs are (220, 284), (1184, 1210), 
(2620, 2924), (5020, 5564), (6232, 6368), (10744, 10856), (12285, 
14595), (17296, 18416), (63020, 76084), (66928, 66992), ... (sequence 
A259180 in the OEIS; see also A002025, and A002046). 

A semiperfect number is a natural number that is equal to the 
sum of all or some of its proper divisors. 

The first few semiperfect numbers are 6, 12, 18, 20, 24, 28, 30, 
36, 40, 42, ... (sequence A005835 in the OEIS). 

A semiperfect number that is equal to the sum of all its proper 
divisors is a perfect number. 

So, any perfect number is semiperfect. 

Most abundant numbers are also semiperfect; abundant num- 
bers which are not semiperfect are called weird numbers. They start 
from 70, 836, 4030, 5830, 7192, 7912, 9272, 10430, 10570, 10792, ... 
(sequence A006037 in the OEIS). 

An k-hyperperfect number is a natural number n for which the 
equality 

n=1+k(o(n) —n-1) 
holds. A hyperperfect number is an k-hyperperfect number for some 
integer k. 


Hyperperfect numbers generalize perfect numbers, which are 
1-hyperperfect. 
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The first few numbers in the sequence of k-hyperperfect numbers 
are 6, 21, 28, 301, 325, 496, 697, 1333, 1909, 2041, ... (sequence 
A034897 in the OEIS), with the corresponding values of k being 1, 
2, 1, 6, 3, 1, 12, 18, 18, 12, ... (sequence A034898 in the OEIS). 

The first few k-hyperperfect numbers that are not perfect are 21, 
301, 325, 697, 1333, 1909, 2041, 2133, 3901, 10693, ... (sequence 
A007592 in the OEIS). 

A number n is called k-perfect (or k-fold perfect) if the sum of all 
positive divisors of n is equal to kn. A number that is k-perfect for 
a certain k is called a multiply perfect number. 

So, any perfect number is 2-perfect, and hence, multiply perfect. 

As of 2020, k-perfect numbers are known for each value of k up 
to 11. 

The proofs of these properties and some additional informa- 
tion see, for example, in [Buch09], [DeDel2], [Dezal7], [Dezal18], 
[DeKo13], [JoLo99], [Wiki20]. 


Exercises 


1. Prove, that even perfect numbers are of the form $3(2?—1), where 
S3(n) is the n-th triangle number; find first resulting triangular 
numbers. 


2. Prove, that even perfect numbers greater 6 are of the form 
1+9-S3(7 5%), where $3(n) is the n-th triangle number; find 
first resulting triangular numbers. Prove, that their last digits 


are 3 or 5. 
3. Prove, that every even perfect number ends in 6 or 28, base 10. 
4. Prove, that every even perfect number greater 6 ends in 1, base 9. 


5. Check, that adding the digits of any even perfect number greater 
6, then adding the digits of the resulting number, and repeating 
this process until a single digit (called the digital root) is obtained, 
always produces the number 1. 


6. Prove, that the only square-free (even) perfect number is 6. 
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5.3 Problems in Number Theory, 
connected with Fermat 
numbers 


The famous mathematical fact, connected with Fermat numbers, is 
the Gauss-Wantzel theorem on construction of a regular polygon 
with compass and straightedge. 


Constructible polygons: history of the 
question 


5.3.1. A regular polygon is a polygon that is equiangular (all angles 
are equal in measure) and equilateral (all sides have the same length). 

A constructible polygon is a regular polygon that can be con- 
structed with compass and straightedge. 

Some regular polygons are easy to construct with compass and 
straightedge; others are not. 

The ancient Greek mathematicians knew how to construct regular 
polygons with 3, 4, or 5 sides. 

They knew also how to construct a regular polygon with double 
the number of sides of a given regular polygon. So, they knew the 
constructions of any regular n-gon with 


n= 2+?) 71 = 3.2% n=5-2% k> 0. 


This led to the question being posed: is it possible to construct all 
regular polygons with compass and straightedge? If not, which n-gons 
(that is polygons with n edges) are constructible and which are not? 

Carl Friedrich Gauss proved the constructibility of the regular 17- 
gon in 1796. Five years later, he developed the theory of Gaussian 
periods in his Disquisitiones Arithmeticae. This theory allowed him 
to formulate a sufficient condition for the constructibility of regu- 
lar polygons: a regular n-gon can be constructed with compass and 
straightedge if n is the product of a power of 2 and any number of 
distinct Fermat primes (including none). 

Gauss stated without proof that this condition was also necessary, 
but never published his proof. A full proof of necessity was given by 
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Pierre Wantzel in 1837. The result is known as the Gauss—Wantzel 
theorem. 


Theorem (Gauss—Wantzel theorem). A regular n-gon can be 
constructed with compass and straightedge if and only if n is the 
product of a power of 2 and any number of distinct Fermat primes 
(including none). 

The five known Fermat primes are: 

Fo = 3, Fy = 5, Fh = 17, F3 = 257, and Fy = 65537 (sequence 
A019434 in the OEIS). 

The next twenty-eight Fermat numbers, Fs; through F2, are 
known to be composite. 

Thus, a regular n-gon is constructible if n = 3, 4, 5, 6, 8, 10, 
12, 15, 16, 17, ... (sequence A003401 in the OEIS), while a regular 
n-gon is not constructible if n = 7, 9, 11, 13, 14, 18, 19, 21, 22, 
23, ... (sequence A004169 in the OEIS). 

Since there are 31 combinations of anywhere from one to five 
Fermat primes, there are 31 known constructible polygons with an 
odd number n of sides. These n are 3, 5, 15, 17, 51, 85, 255, 
257, 771, 1285, 3855, 4369, 13107, 21845, 65535, 65537, 196611, 
327685, 983055, 1114129, 3342387, 5570645, 16711935, 16843009, 
50529027, 84215045, 252645135, 286331153, 858993459, 1431655765, 
4294967295 (sequence A045544 in the OEIS). 

So, there are infinitely many constructible polygons, but only 31 
with an odd number of sides are known. 

For some additional information see, for example, [Dezal7], 
[Dick05], [Sier64], [StepO1], [Wiki20]. 


Constructible polygons and constructible 
numbers 


5.3.2. In order to reduce a geometric problem to a problem of 
pure Number Theory, the proof uses the fact that a regular 
n-gon is constructible if and only if the cosine of its central angle, 
20 
cos =, 
of the four basic arithmetic operations and the extraction of square 


roots. 


is a constructible number: that is, can be written in terms 
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So, the Gauss—Wantzel theorem states, that 


® cos 22 is a constructible number if and only if n is the product 


of a power of 2 and any number of distinct Fermat primes (including 
none). 


Compass and straightedge constructions are known for all known 


constructible polygons. 


It is easy to check, that ifn = p-q with p=2 and q odd, or with 


p and q odd coprime, an n-gon can be constructed from a p-gon and 


a q-gon. 


It concludes the proof. 


Consider two possibilities. 


If p = 2, draw a q-gon and bisect one of its central angles. From 
this, a 2g-gon can be constructed. 


If p > 2, inscribe a p-gon and a q-gon in the same circle in such a 
way that they share a vertex. Because p and q are relatively prime, 


there exists integers a,b such that ap + bq = 1. Then 20m 4 Bee 
on i.e., the number on is constructible. From this, an pg-gon can 
be constructed. 


Thus, one only has to find a compass and straightedge construc- 


tion for n-gons where n is a Fermat prime. 


The construction for an equilateral triangle is simple and has been 
known since Antiquity. In fact, 
20 1 
os — = -. 
COs 5 
Constructions for the regular pentagon were described both by 
Euclid (Elements, circa 300 BC), and by Ptolemy (Almagest, circa 
AD 150). In fact, 


a 14/5 
cos — = : 


5 4 


Although C.F. Gauss proved that the regular 17-gon is con- 
structible, he did not actually show how to do it. The first con- 
struction is due to Erchinger, a few years after Gauss’ work. 
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The explicit construction of a heptadecagon was given by Herbert 
William Richmond in 1893. In fact, 


2 
16 cos Sf ba 17 £4) 54 7 


$Y 17+ BV1T — 4/ 34 = 217 — 24/34 4 OVI17 
=-14+V17+ 1/34-2V17 


pO TT EBV TT = yy 170-4 Sey 17. 


e The first explicit constructions of a regular 257-gon were given 
by Magnus Georg Paucker (1822) and Friedrich Julius Richelot 
(1832). 


e A construction for a regular 65537-gon was first given by Johann 
Gustav Hermes (1894). The construction is very complex; J.H. 
Hermes spent 10 years completing the 200-page manuscript. 


For some additional information see, for example, [Dezal7], 
[Dick05], [Gaus01], [IrRo90], [KLSO1], [Kost82], [Madd05], [Tsan10], 
[Sier64], [Shko61], [Step01], [Wiki20]. 


Other concepts of constructibility 


5.3.3. The concept of constructibility as discussed before applies 
specifically to compass and straightedge construction. 

More constructions become possible if other tools are allowed. 

The so-called neusis constructions, for example, make use of a 
marked ruler. Neuseis construction have been important because it 
sometimes provides a means to solve geometric problems that are not 
solvable by means of compass and straightedge alone. Examples are 
the trisection of any angle in three equal parts, the doubling of the 
cube, and the construction of a regular heptagon (7-gon), nonagon 
(9-gon), or tridecagon (13-gon). 
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In fact, a regular polygon with n sides can be constructed with 
ruler, compass, and angle trisector if and only if 


n = 2°3*p1p2-.-Dk; 


where r,s,k >0, and3 < py <... < py are distinct Pierpont primes. 

Here, a Pierpont prime is a prime number of the form 2“3° + 1 
with some nonnegative integers u and v. 

The first few Pierpont primes are 2, 3, 5, 7, 13, 17, 19, 37, 73, 
97,... (sequence A005109 in the OEIS). 

An Pierpont prime 2"3” +1 with v = 0 is a Fermat prime. So, all 
constructible polygons can be constructed with ruler, compass, and 
angle trisector, too. 

As 7 is a Pierpont prime, the regular heptagon, which is not con- 
structible with compass and straightedge, is constructible with ruler, 
compass, and angle trisector. It is the smallest regular polygon with 
this property. 

The smallest prime that is not a Pierpont (or Fermat) prime is 
11; therefore, the regular hendecagon is the smallest regular polygon 
that cannot be constructed with compass, straightedge and angle 
trisector (or origami, or conic sections). 

For some additional information see, for example, [Dick05], 
[KLSO1], [Madd05], [Ore48], [Tsan10], [Sier64]. 


Sketch of a proof of the Gauss—Wantzel 
theorem 
Consider the sketch of the proof of the Gauss—Wantzel theorem. 


5.3.4. First notice that constructing a regular n-gon is equivalent to 
constructing the n-th roots of unity in the complex plane, starting 
with the point (1,0). 

It is because the n-th roots of unity form a regular n-gon on the 
complex plane. 

Now consider a primitive n-th root of unity 


2ni Qn. , bt 
Gy =e =cos—+isin—. 
n n 
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So, now all the n-th roots of unity are 


2 _—1 
Lea Geass i ‘ 


As the set of constructible numbers is a field, these numbers will be 
constructible if and only if ¢, is constructible. Hence a regular n-gon 
is constructible if and only if ¢, is a constructible number. 


5.3.5. Now by the characterization of constructible numbers, ¢,, will 
be constructible if and only if there is a chain of field extensions 


Q=hKo CAC... C Km = Qn) 
such that each extension K; C Kj4, is quadratic, i.e., [Aj41 : Ky] = 2. 


We claim that this happens if and only if ¢(n) is a power of 2, 
where ¢(n) is the Euler’s totient function: 


o(n) = 2™. 
First we note that Q(¢,) is the n-th cyclotomic field, and hence 
[Q(Gn) : Q) = O(n). 


Assume that such a chain of field extensions exists. Then by the 
tower law: 


g(n) = [Q(Cn) : Q| = pe : Kil . Ee 7 Fan] Piste 9 [ky : Ko] 
S02, 3 
as desired. 

Now assume that ¢(n) = 2”, for some m. The field Q(¢,) is 
the splitting field of n-th cyclotomic polynomial, ®,(a), and hence 
Q(¢n)/Q is a Galios extension. 

Now the order of the Galios group G = Gal(Q(¢,)/Q) is just 

[Q(¢n) : Q] = 2”. 
Thus, G is a 2-group, and hence there must exist a chain of subgroups 
G=Gm>Gm_-1>..>Go=1 


with [Gi41 : Gi] = 2 for all 7. Now by the Fundamental theorem of 
Galios theory, if K; is the fixed field of G;, then 


Q = Km C Km C .. © Ko = Q(Gn), 
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and [K; : Kisi] = [Gigi : Gi] = 2. Therefore, ¢, is indeed con- 

structible. 

5.3.6. We have now shown that a regular n-gon is constructible if 

and only if ¢(n) is a power of 2. It only remains to show that the 

integers which satisfy this are precisely the integers in the given form. 
Let the prime factorization of n be 


a (a4 (e7 
QS 2p py Ds 


where p1, p2, ---, Dk are distinct odd primes, a; > 1 for all 2, and a > 0. 
Then by the formula for ¢(n) we have 


p(n) = 297). ph. p$2-t par“! . (py — 1)(p2 — 1)...(Pn — 1), 
or, ifa = 0, 
b(n) = ptr "pS? ...pe"— (py — 1)(p2 — 1).--(Pn — 1). 


Assume that ¢(n) = 2™. As a power of 2 cannot be divisible by an 
odd prime, we cannot have a; > 1 for any i (otherwise we would 


have p;|2”"), so 


Qa) Os bea An es 


Also, any divisor of a power of 2 must also be a power of 2, so p; — 1 
is a power of 2 for each 7, from which is easily follows that each p; is 
a Fermat prime. Hence, n has the desired form. 

Conversely assume that 


n = 2%: po: ... > Pky 
where 71, po, .--, Pk are distinct Fermat primes, say, pj = geri +1. 
Then 
b(n) = 22-1. (py, — 1)(po — 1)...(pyn — 1) = 207} 277) 92"? 1 027 
or, of a=0, 
(n) = (p1 — 1)(p2 — 1)...(Pn — 1) = 222 «22? «227, 

In either case this is a power of 2, as desired. This completes the 
sketch of the proof. 

The fool proof of the theorem and some additional information 


see, for example, in [Carm19], [Deza17], [Gaus01], [Gelf98], [Glea88}, 
[KLSO1], [Madd05], [Pier95], [Shko61], [Tsan10], [Want36]. 
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Exercises 


NI 


11. 
12. 


5. 


. Construct a regular triangle with compass and straightedge. 
. Construct a regular hexagon with compass and straightedge. 
. Construct a square with compass and straightedge. 


1 
2 
3 
4, 
5 
6 


Construct a regular octagon with compass and straightedge. 
Qn _ 1+V5_ 


. Prove, that cos = z 


. Find all solutions of the equation ¢(x) = 8; ¢(@) = 9; ¢(@) = 5; 


ole) =m 


. Find first ten Pierpont primes. 
. Prove, that any Fermat prime is an Pierpont prime. 


. Prove, that all odd non-Fermat Pierpont primes have the form 


6k +1. 


. Check, that 11 is a Pierpont prime of the second kind, i.e., a 


prime number of the form 2"3" — 1, u,v > 0. 
Find first ten Pierpont primes of the second kind. 


Prove, that any Mersenne prime is an Pierpont prime of the 
second kind. 


4 Prime numbers records and 
Mersenne numbers 


Prime numbers have long fascinated both amateurs and professional 


mathematicians. 


At present, the research of new large primes is an important part 


of pure Mathematics and Computer Science. In the last few years, 


several distributed computing projects, including PrimeGrid, Great 


Internet Mersenne Prime Search, Fermat Search, Twin Prime Search 


etc., are hunting for very large prime numbers whilst also aiming to 


solve long-standing mathematical conjectures. 
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The PrimePages: Prime number research 
and record 


5.4.1. The PrimePages is a website about prime numbers main- 
tained by C. Caldwell at the University of Tennessee at Martin. 

The site maintains the list of the “5000 largest known primes”, 
selected smaller primes of special forms, and many “top twenty” lists 
for primes of various forms. 

The PrimePages has articles on primes and primality testing. It 
includes “The Prime Glossary” with articles on hundreds of glosses 
related to primes, and “Prime Curios!” with thousands of curios 
about specific numbers. 

The database started as a list of titanic primes (primes with at 
least 1000 decimal digits) by S. Yates. In subsequent years, the whole 
top-5000 has consisted of gigantic primes (primes with at least 10000 
decimal digits). 

Primes of special forms are kept on the current lists if they are 
titanic and in the top-20 or top-5 for their form. 

Any record in these lists of the top-20 (or top-10, or top-5) is a 
testament to the incredible amount of work put in by the program- 
mers, project directors, and the tens of thousands of enthusiasts. In 
the table below we list the 20 larget known primes. 


20 Largest Known Primes 


[ [Primes [Number of digits 


902089989: =.) 24862048 51-th(?) Mersenne prime 
Ig e287 23249425 50-th(?) Mersenne prime 
974207281 _ 1 22338618 49-th(?) Mersenne prime 
DP Tee teh si 17425170 48-th(?) Mersenne prime 
eal | 12978189 47-th Mersenne prime 
Den eeer il 12837064 46-th Mersenne prime 
Qerteenet <1 11185272 45-th Mersenne prime 
ge soR ee oT =] 9808358 44-th Mersenne prime 
10223 - 29117226 + 119383761 
101230402487 7 9152052 43-th Mersenne prime 
7816230 42-th Mersenne prime 
7235733 41-th Mersenne prime 
6320430 40-th Mersenne prime 


(continued) 


1 
2 
3 
4 
5 
6 
7 
8 
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(Continued) 


[Primes [Naber of digits] Year [Comment ——*Y 
14}10590941048976 4 1 Generalized Fermat prime 
15}9194441048976 4 7 Generalized Fermat prime 
16]168451 . 279375200 4 4 

17] 7 oQteFs88 88 to Divides Fermat number 


F\3233954 
18} 1234471048976 _ Generalized unique prime 
123447924288 4.1 
19|7 - 66772401 4 4 
208508301 - 217016603 _ 415122515 


See for an additional information [Prim20], [Wiki20]. 


Mersenne primes and GIMPS 


5.4.2. The largest known prime has almost always been a Mersenne 
prime. 

Why? Because the way the largest numbers N are proven prime 
is based on the factorizations of either N +1 or N—1. For Mersenne 
mumbers the factorization of N + 1 is as trivial as possible; it is a 
power of two. 

At present there are few practical uses for this new large primes, 
prompting some to ask “why search for these large primes” ? 

Those same doubts existed a few decades ago until important 
cryptography algorithms were developed based on prime numbers. 


5.4.3. The Great Internet Mersenne Prime Search (GIMPS) is a 
collaborative project of volunteers who use freely available software 
to search for Mersenne prime numbers. 

GIMPS is said to be one of the first large scale distributed com- 
puting projects over the Internet for research purposes. 

It has had a virtual lock on the largest known prime, because its 
excellent free software is easy to install and maintain, requiring little 
of the user. 

GIMPS was founded in early 1996 by G. Woltman to discover 
new world record size Mersenne primes. 

GIMPS is registered as Mersenne Research, Inc. with S. Kurowski 
as Executive Vice President and board director. 
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The name for the project was coined by L. Welsh, one of its earlier 
searchers and the co-discoverer of the 29-th Mersenne prime. 

Within a few months, several dozen people had joined, and over 
a thousand by the end of the first year. 

J. Armengaud, a participant, discovered the primality of M1398269 
on November 13, 1996. 

In 1997 S. Kurowski enabled GIMPS to automatically harness 
the power of thousands of ordinary computers to search for these 
“needles in a haystack”. 

Most GIMPS members join the search for the thrill of possi- 
bly discovering a record-setting, rare, and historic new Mersenne 
prime. 


5.4.4. As of 2020, the project has found a total of seventeen 
Mersenne primes, fifteen of which were the largest known prime num- 
ber at their respective times of discovery. 

In 1996, J. Armengaud et al. discovered the 35-th Mersenne prime 
My4398269 in France. 

In 1999, Nayan N. Hajratwala has discovered the first known 
million-digit prime number using software written by G. Woltman 
and the distributed computing technology and services of Kurowski’s 
company. 

This prime number, 2°°’7°9? — 1, is the 38-th Mersenne prime. It 
contains 2098960 digits. 

Nayan Hajratwala used a Pentium I] IBM Aptiva computer run- 
ning part-time for 111 days to prove the number prime. 

Running uninterrupted it would take about three weeks to test 
the primality of this number. 

There are several prizes offered by the Electronic Frontier Foun- 
dation for record primes. 

This record, passed one million digits in 1999, earning a US$50000 
prize. 

In 2008, the record passed ten million digits (12978189 digits of 
M,3112609, the 47-th Mersenne prime), earning a US$100000 prize 
and a Cooperative Computing Award from the Electronic Frontier 
Foundation. Time (an American weekly news magazine), called it 
the 29-th top invention of 2008. 
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Both the US$50000 and the US$100000 prizes were won by par- 
ticipation in GIMPS. 

As of 2020, the largest known prime is 2 M2589933 )- 
It has 24862048 digits. It was discovered in 2018 by P. Laroche, one 
of thousands of volunteers using free GIMPS software available at 


82589933 _ 7 ( 


www.mersenne.org/download/. 

The new prime number Mgog589933 is calculated by multiplying 
together 82589933 two’s, and then subtracting one. 

It is more than one and a half million digits larger than the pre- 
vious record prime number 2/2978! — 1, Mi 4997281 (having 23249425 
digits). 

It is only the 51-st known Mersenne prime ever discovered, each 
increasingly more difficult to find. 

For many years, P. Laroche had used GIMPS software as a free 
“stress test” for his computer builds. On the time, he started prime 
hunting on his media server to “give back” to the project. After less 
than four months and on just his fourth try, he discovered the new 
prime number. 

By way of comparison, some GIMPS participants have searched 
for more than 20 years with tens of thousands of attempts but no 
success. Thus proving that even the “little guy” can compete against 
those with lots of computing resources. 

The primality proof took twelve days of non-stop computing. To 
prove there were no errors in the prime discovery process, the new 
prime was independently verified using three different programs on 
three different hardware configurations. 

The number Mgo589933 has 24862048 decimal digits. To help visu- 
alize the size of this number, if it were to be saved to disk, the result- 
ing text file would be nearly 25 megabytes long (most books in plain 
text format clock in under two megabytes). A standard word proces- 
sor layout (50 lines per page, 75 digits per line) would require 6629 
pages to display it. 

GIMPS is also coordinating its long-range search efforts for 
primes of 100 million digits and larger and will split the Electronic 
Frontier Foundation’s US$150000 prize with a winning participant. 
Additional prize is being offered for the first prime number found 
with at least one billion digits. 
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5.4.5. GIMPS has also been extremely lucky over the last 15 years. 
The largest known prime Mgg589933 is GIMPS’ 12-th prime discovery 


gA0000000' 1, amd 50000 _ 1. triple the expected munbert 


between 
of new primes in this interval (see Chapter 3, section 3.6). 

One reason to search for new primes is to match actual results 
with expected results. This anomaly is not necessarily evidence 
that existing theories on the distribution of Mersenne primes is 
incorrect. However, if the trend continues it may be worth further 
investigation. 

On December 4, 2020, the project passed a major milestone after 
all exponents below 100 million were checked at least once. 


5.4.6. There is a unique history to the arithmetic algorithms under- 
lying the GIMPS project. 

In the early 1990’s, R. Crandall, Apple Distinguished Scientist, 
discovered ways to double the speed of what are called convolutions, 
essentially big multiplication operations. 

The method is applicable not only to prime searching but other 
aspects of computation. 

During that work he also patented the Fast Elliptic Encryption 
system, now owned by Apple Computer, which uses Mersenne primes 
to quickly encrypt and decrypt messages. 

G. Woltman implemented Crandall’s algorithm in assembly lan- 
guage, thereby producing a prime-search program of unprecedented 
efficiency. 

In general, GIMPS project relies primarily on the Lucas—Lehmer 
primality test as it is an algorithm that is both specialized for test- 
ing Mersenne primes and particularly efficient on binary computer 
architectures. 

There is also a trial division phase, used to rapidly eliminate many 
Mersenne numbers with small factors. 

Pollard’s (p — 1)-algorithm is also used to search for smooth 
factors. 

In 2017, GIMPS adopted the Fermat primality test as an alterna- 
tive option for primality testing. 


5.4.7. The search for more Mersenne primes is already under way. 
There may be smaller, as yet undiscovered Mersenne primes, and 
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there almost certainly are larger Mersenne primes waiting to be 
found. 


Anyone with a reasonably powerful personal computer can join 


GIMPS and become a big prime hunter, and possibly earn a cash 
research discovery award. 


All the necessary software can be downloaded for free at 


www.mersenne.org/download/. 


For an additional information see [DeKo18], [Ribe89], [Ribe96], 


(SIP195]; for useful connections see [GIMPS20], [Prim20], [Sloa20], 
[Wiki20]. 


Exercises 


1. 
2 
3. 


Prove, that F73 has more than 24- 107° digits. 


9°82 


Prove, that F945 has more than 1 digits. 


Using the table of Mersenne primes, find the first Mersenne titanic 
prime number. 


. Using the table of Mersenne primes, find the first Mersenne gigan- 


tic prime number. (A gigantic prime is a prime number with at 
least 10000 decimal digits.) 


. Using the table of Mersenne primes, find the first Mersenne gigan- 


tic number. 


. Using the table of Mersenne primes, find the first Mersenne 


megaprime. (A megaprime is a prime number with at least one 
million decimal digits.) 


. Using a table of primes, find the first pair of titanic twin primes. 


. Using Prime Page, find the biggest known pair of twin primes. 


5.5 Mersenne and Fermat 


numbers in Cryptography 


Public-key Cryptography and large primes 


5.5.1. Cryptography, or Cryptology (from Ancient Greek’s kryptdés 
(“hidden, secret”) and graphein (“to write”), or logia (“study”), 
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respectively) is the practice and study of techniques for secure com- 
munication in the presence of third parties, called adversaries. 

More generally, Cryptography is about constructing and analyz- 
ing protocols that prevent third parties or the public from reading 
private messages. 

Various aspects in Information Security such as Data Confiden- 
tiality, Data Integrity, Authentication, and Non-Repudiation are cen- 
tral to modern Cryptography. 

Applications of Cryptography include Electronic Commerce, 
Chip-based Payment Cards, Digital Currencies, Computer Pass- 
words, and Military Communications. 

Cryptography plays a major role in Digital Rights Manage- 
ment and Copyright Infringement disputes in regard to digital 
media. 

Modern Cryptography exists at the intersection of the disciplines 
of Mathematics, Computer Science, Electrical Engineering, Commu- 
nication Science, and Physics. 

It is heavily based on mathematical theory and Computer Sci- 
ence practice; cryptographic algorithms are designed around com- 
putational hardness assumptions, making such algorithms hard to 
break in actual practice by any adversary. While it is theoretically 
possible to break into a well-designed such system, it is infeasible in 
actual practice to do so. 

Such schemes, if well designed, are therefore termed “computa- 
tionally secure”; theoretical advances, e.g., improvements in integer 
factorization algorithms and, therefore, in study and search of new 
“ood” big numbers, and faster computing technology require these 
designs to be continually re-evaluated, and if necessary, adapted. 

In addition to being aware of cryptographic history, crypto- 
graphic algorithm and system designers must also sensibly consider 
probable future developments while working on their designs. For 
instance, continuous improvements in computer processing power 
have increased the scope of brute-force attacks, so when specifying 
key lengths, the required key lengths are similarly advancing. The 
potential effects of Quantum Computing are already being considered 
by some cryptographic system designers developing post-quantum 
Cryptography. 
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5.5.2. Cryptosystems all involve a key: a piece of information nec- 
essary to encrypt information. 

This can be symmetric, for example, in the form of a one-time pad, 
such as the string of binary bits used by the Vernam cipher. This 
cryptosystem belongs to information-theoretically secure schemes 
that provably cannot be broken even with unlimited computing 
power. 

There are very few cryptosystems that are proven to be uncondi- 
tionally secure; the one-time pad is one, and was proven to be so by 
C. Shannon. 

However, these schemes are much more difficult to use in prac- 
tice than the best theoretically breakable but computationally secure 
schemes. 

Symmetric-key Cryptography refers to encryption methods in 
which both the sender and receiver share the same key (or, less com- 
monly, in which their keys are different, but related in an easily 
computable way). 

So, symmetric-key cryptosystems use the same key for encryp- 
tion and decryption of a message, although a message or group of 
messages can have a different key than others. 

A significant disadvantage of symmetric ciphers is the key man- 
agement necessary to use them securely. Each distinct pair of com- 
municating parties must, ideally, share a different key, and perhaps 
for each ciphertext exchanged as well. The number of keys required 
increases as the square of the number of network members, which 
very quickly requires complex key management schemes to keep them 
all consistent and secret. 

Contemporary symmetric-key ciphers are implemented as either 
block ciphers or stream ciphers. A block cipher enciphers input in 
blocks of plaintext as opposed to individual characters, the input 
form used by a stream cipher. 

Symmetric-key Cryptography was the only kind of encryption 
publicly known until 1976. 


5.5.3. Extensive open academic research into Cryptography began 
only in the mid-1970’s. 

In 1976, W. Diffie and M. Hellman proposed the notion of Public- 
key (also, more generally, called Asymmetric-key) Cryptography in 
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which two different but mathematically related keys are used: a pub- 
lic key and a private key. 

A public-key system is so constructed that calculation of one key 
(the “private key”) is computationally infeasible from the other (the 
“public key”), even though they are necessarily related. 

Instead, both keys are generated secretly, as an interrelated 
pair. 

The historian D. Kahn described Public-key Cryptography as 
“the most revolutionary new concept in the field since polyalpha- 
betic substitution emerged in the Renaissance.” 

In public-key cryptosystems, the public key may be freely dis- 
tributed, while its paired private key must remain secret. 

In a public-key encryption system, the public key is used for 
encryption, while the private or secret key is used for decryption. 

W. Diffie and M. Hellman showed that Public-key Cryptography 
was indeed possible by presenting the Diffie-Hellman key exchange 
protocol (Diffie-Hellman algorithm, DHA), a solution that is now 
widely used in secure communications to allow two parties to secretly 
agree on a shared encryption key. 

Diffie and Hellman’s publication sparked widespread academic 
efforts in finding a practical public-key encryption system. 

This race was finally won in 1978 by R. Rivest, A. Shamir, and 
L. Adleman, whose solution has since become known as the RSA 
algorithm. 

The Diffie-Hellman and RSA algorithms, in addition to being the 
first publicly known examples of high quality public-key algorithms, 
have been among the most widely used. Other asymmetric-key algo- 
rithms include the Cramer—Shoup cryptosystem, ElGamal encryp- 
tion, and various elliptic curve techniques. 

Public-key Cryptography is also used for implementing digital sig- 
nature algorithms (DSA). 

A digital signature is reminiscent of an ordinary signature; they 
both have the characteristic of being easy for a user to produce, but 
difficult for anyone else to forge. Digital signatures can also be per- 
manently tied to the content of the message being signed; they cannot 
then be moved from one document to another, for any attempt will 
be detectable. 
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In digital signature schemes, there are two algorithms: one for 
signing, in which a secret key is used to process the message (or a 
hash of the message, or both), and one for verification, in which the 
matching public key is used with the message to check the validity 
of the signature. 

RSA and DSA are two of the most popular digital signature 
schemes. Digital signatures are central to the operation of public- 
key infrastructures and many network security schemes. 


5.5.4. Public-key algorithms are most often based on the compu- 
tational complexity of “hard” mathematical problems (often from 
Number Theory), that are easy to state but have been found diffi- 
cult to solve. 

Most modern cryptographic techniques can only keep their keys 
secret if certain mathematical problems are intractable, such as the 
integer factorization or the discrete logarithm problems, so there are 
deep connections with abstract Mathematics. 

For example, the integer factorization problem, i.e., the infeasi- 
bility of factoring extremely large integers, is the basis for believing 
that RSA is secure. The hardness of DHA and DSA are related to 
the discrete logarithm problem, i.e., on the assumption that the com- 
putation of discrete logarithm over carefully chosen groups has no 
efficient solution. 

The security of Elliptic Curve Cryptography is based on number- 
theoretical problems involving elliptic curves. 

But even so proofs of unbreakability are unavailable since the 
underlying mathematical problems remain open. 

Because of the difficulty of the underlying problems, most public- 
key algorithms involve operations such as modular multiplication 
and exponentiation, which are much more computationally expensive 
than the techniques used in most block ciphers, especially with typ- 
ical key sizes. As a result, public-key cryptosystems are commonly 
hybrid cryptosystems, in which a fast high-quality symmetric-key 
encryption algorithm is used for the message itself, while the relevant 
symmetric key is sent with the message, but encrypted using a public- 
key algorithm. 
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Similarly, hybrid signature schemes are often used, in which a 
cryptographic hash function is computed, and only the resulting hash 
is digitally signed. 

For references and additional information see, for example, 
[Beuk88], [Bras88], [DeKo18], [DiHe76], [Kerc83]. 


(IN — 1)-based primaliy tests 


5.5.5. The well-known deterministic primality test is the Lucas test; 
for a positive integer N, it requires that the all prime factors of the 
number N — 1 be already known. In other words, the test uses the 
full factorization of N —1 to prove that a positive integer N is prime. 
Formally, the Fermat numbers are the best candidates for such kind 
of (N — 1)-based primality tests, as in this case N — 1 is just a power 
of two. 

The Lucas test is the basis of the Pratt certificate that gives a 
concise verification that N is prime. 

The algorithm of the test is thus. 

e Let n > 1 be an odd positive integer, and suppose there exist 
number 1<a<n, such that: 


e a”! =1(mod n); 
e foe 4 1(mod n) for any prime q|(n — 1). 


Then n is prime. Otherwise n is composite. 


In fact, by multiplicative order’s properties, we obtain from the 


first condition, that ord, a|(n — 1), and from the second condition 
it follows, that ord,a = n —1. As ord, al|¢(n), where ¢(n) is the 
Euler’s totient function, then n—1|¢(n); as ¢(n) < n for n £1, then 
o(n) =n—-Il,ie, ne P. 

Conversely, if n is prime, then there exists a primitive root g 
modulo n. It holds ord, g = n — 1, and both equivalences will hold 


for any such primitive root g prime modulo n. 
Note that if there exists a positive integer 1 < a < n such that 


the first equivalence fails, a is a Fermat witness for the compositeness 
of n. 
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5.5.6. The Pocklington—Lehmer primality test is a deterministic pri- 
mality test devised by H.C. Pocklington and D.H. Lehmer. The test 
uses a partial factorization of N — 1 to prove that an integer N is 
prime. 

It produces a primality certificate to be found with less effort than 
the Lucas primality test, which requires the full factorization of N—1. 

The basic version of the test is thus. 

e Let n> 1 be an integer, and suppose there exist numbers a and 
p such that: 


e a”! =1(mod n); 

e p is prime; p|(n—1); p> /n-1; 
® ged(a"? —1,n) =1. 

Then n is prime. 


Suppose n is not prime. Then there must be a prime q, g < /n, 
that divides n. Since 


p>JV/n-1>q-1, it holds p>q-1, 


and since p is prime, gcd(p,q—1) = 1. Thus, there must exist an 
integer u, a multiplicative inverse of p modulo g—1, with the property 
that 


up = 1(mod q— 1). 
Therefore, by the Fermat’s little theorem, it holds 
a“? = a(mod q). 
As q|n and a”! = 1(mod n), we get that a”~! = 1(mod q). Now 


this implies 


n—-1 n-1 n-1 
tS ("Peau aa" s =O)? Sar da). 


n-1 


n—1 
This shows that q divides a> — 1. As q\(a » — 1) and g|n, it 
n—1 n—1 
holds that q|gcd(a ? —1,n), and, therefore, gced(a ? —1,n)#l;a 
contradiction. 
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On the other hand, if n is a prime number, then there exists a 
primitive root g modulo n. It is a generator of the group Z/nZ*. 
Such a generator has order |Z/nZ*| = n— 1. So, 


g” | =1(mod n), and 


g-? #1(mod n) for any prime p|(n— 1). 


n—1 
It means, that n/(g » — 1), and, for a prime n, we get that 
n—1 
gcd(g » —1,n)=1. 
Given n, if p and a can be found which satisfy the conditions of 


the theorem, then n is prime. Moreover, the pair (p,a) constitute 
a primality certificate which can be quickly verified to satisfy the 
conditions of the theorem, confirming n as prime. 

The main difficulty is finding a “good” value of p. First, it is usu- 
ally difficult to find a large prime factor of a large number. Second, 
for many primes n, such a p does not exist. For example, n = 17 (as 
well as any Fermat number) has no suitable p because n — 1 = 2%. 

Note, that first equation is simply a Fermat primality test. If we 
find any value of a, not divisible by n, such that equation is false, we 
may immediately conclude that n is not prime. 

For example, let n = 35. With a = 2, we find that a”! = 
9(mod n). This is enough to prove that n is not prime. 

If n = 229, consider a decomposition 


229 = 19-12+1, 
ie., put p = 19. Let a = 2. It is easy to check, that 
n—1 
a1 = 278 = 1(mod 229), and gced(a > ,n) = gcd(2'*, 229) = 1. 


Therefore, 229 is a prime nuber. 

The algorithm of the generalized Pocklington test, examples and 
some additional information see, for example, in [Bras88], [DeKo18], 
[DiHe76], [Kerc83], [Salo90]. 


(IN + 1)-based primality tests 


5.5.7. Define (N+1)-based primality test as a deterministic primality 
test working under conditions that full or partially decomposition of 
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number N + 1 is known. Formally, the Mersenne numbers are the 
best candidates for such kind of primality tests, as in this case N +1 
is just a power of two. 

For example, the following algorithm can be applied to the num- 
ber n, if all prime divisors of n + 1 are known. 

e Given odd positive integer n > 1, let integer p and q are rel- 
atively prime; let the sequence {U;}; is defined by the recurrence 
Uo = 0, U, = 1, and 


Uini =p: Ui —q-Ui-1 for 1>1. 
Let 


e p* —4q is a quadratic nonresidue modulo n; 


e Un4y1 = 0(mod n); 


e Unsi £0(mod n) for any prime divisor p of n+ 1. 
Pp 


Then n is a prime. 
For example, let n = 350657. In this case, for n + 1 it holds: 


350658 = 2-3°-7-117- 23. 


Let p = 3, ¢ = 5; in this case p? — 4g = 3* —4-5 = —11. Easy to 
see, that (=4) = -1. 
Consider the sequence {U;}; modulo n: 


(=O a1 =n 
wey Un—1 = 280525(mod n), Un, = 350656(mod n), Un41 = 0(modn). 
At last, it holds 
Un = 7281(mod n), Us= 155139(mod n), Us= 299210(mod n), 
Un, = 306723(mod n), Up = 51824(mod n). 


So, all three conditions are true, and, hence, the number n = 350657 
is prime. 


5.5.8. This primality test is based on the properties of so-called 
Lucas sequences, named after a French mathematician E. Lucas. 
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Given integers P, Q, the Lucas sequences U,(P,Q) and V,(P, Q) 
are certain constant-recursive integer sequences that satisfy the 
recurrence relation 


In = P+ Fpn_1 —Q+ Fp_2. 


More exactly, given two integer parameters P and Q, the Lucas 
sequence of the first kind U,(P,Q) is defined by the recurrence 
relation 


Uo(P, Q) = 0,0 (P,Q) _ 1, 
Un(P, Q) =P. Ug iP; Q) a Q . Un_2lP, Q) for n > 1, 


while the Lucas sequence of the second kind V,,(P,Q) are defined by 
the recurrence relation 


Vo(P,Q) = 2,Vi (P,Q) = P, 
Vall Q) = P*Va-ilP, Q) = Q* Vase P.O) for mw > 1. 


Famous examples of Lucas sequences include Fibonacci numbers, 
Mersenne numbers, Pell numbers, Lucas numbers, Jacobsthal num- 
bers, and a superset of Fermat numbers. 

In fact, the sequence U,,(1, —1) gives the Fibonacci numbers, while 
V,(1, -1) gives Lucas numbers. 

The sequence U,(2,—1) form the set of Pell numbers, while 
V,(2,—1) gives Pell-Lucas numbers (or companion Pell numbers). 

The sequence U,,(3,2) gives Mersenne numbers 2” — 1, while 
V,,(3, 2) produces numbers of the form 2” + 1, which include the 
set of Fermat numbers. 

It is not hard to show, that for n > 0 it holds 
a Vall, Q) — Vanill, Q) 
————— 
Va(P, Q) = (ee — 4Q) . Pn PQ) ae ie Veale Q) 


Moreover, the characteristic equation of the recurrence relation for 
Lucas sequences U,,(P,@Q) and V,,(P, Q) is: 


a? — Pr+Q=0. 


Un(P, Q) = 
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It has the discriminant D = P? — 4Q and the roots 


and f= == 


P+vD 
a= —— 
2 
Thus, 


a+b=P, ab=—(P?—D)=Q, a-b=VD. 


Ble 


5.5.9. There exists the following property of the sequence U,,(P, Q). 
e Let n be a positive integer and let (2) be the Jacobi symbol. Let 
6(n) =n—- (2) ; 


If n is a prime such that gcd(n, Q) = 1, then the following congruence 
condition holds: 


Us(n) = O(mod n). 


If this congruence does not hold, then n is not prime. If n is com- 
posite, then this congruence usually does not hold. 

These are the key facts that make Lucas sequences useful in pri- 
mality testing. 

If D is a quadratic residue modulo n, then (2) = —1, and 6(n) = 
n+1. So, we obtain two first conditions of the primality test above. 
In order to do this text deterministic, we add the third condition. 
Note, that the Ducas-Lehmer test for Mersenne primes is a par- 
ticular case of the test above. 

In fact, in order to prove the Lucas-Lehmer test (see Chapter 3, 
Section 3.4), we considered the sequences u, = ae and v, = 
o” +0", where a = 1+4/3, and 6 = 1—4+/3, ie, a+b = 2, and 
ab = —2. In other words, u, = U,(2, —2), and uv, = V,(2, —2). 


5.5.10. However, the third condition seems too strong and requires 
the information about all prime divisors of n. 
If we drop this condition, we obtain a probabilistic primality test. 
e Given integers P and Q, where P > 0 and D = P? — 4Q, let 
Ux(P,Q) and Vi(P,Q) be the corresponding Lucas sequences. Let n 
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be a positive integer and let (2) be the Jacobi symbol. Let 
D 


Us(n) = 0(mod n), 


If 


then n is, possible prime; if 
Usin) £ O(mod n), 


then n is composite. 

A Lucas probable prime for a given (P,Q)-pair is any positive 
integer n for which the congruence U5) = O(mod n) above is true. 
A Lucas pseudoprime for a given (P,@Q)-pair is a composite integer 
n for which the congruence U5,) = 0(mod n) is true. 

In particular, a Fibonacci pseudoprime is defined as a composite 
number n not divisible by 5 for which congruence U5(,) = 0(mod n) 
holds with P = 1 and Q = -1. 

By this definition, the Fibonacci pseudoprimes form a sequence 
323, 377, 1891, 3827, 4181, 5777, 6601, 6721, 8149, 10877, 
(sequence A081264 in the OEIS). 

A Pell pseudoprime may be defined as a composite number n for 
which congruence above is true with P = 2 and Q = —1. The first 
Pelle pseudoprimes are then 35, 169, 385, 779, 899, 961, 1121, 1189, 
2419, ... 


5.5.11. The Lucas probabilistic primality test is most useful if D is 
chosen such that the Jacobi symbol (2) is —1. In his case we obtain 


Un+1 = 0(mod n). 


This is especially important when combining a Lucas test with a 
strong pseudoprime test, such as the Baillie-PSW primality test. 
Typically implementations will use a parameter selection method 
that ensures this condition (e.g., the Selfridge method). 

As in the case with any other probabilistic primality test, if we 
perform additional Lucas tests with different D, P and Q, then unless 
one of the tests proves that n is composite, we gain more confidence 
that n is prime. 
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Before embarking on a probable prime test, one usually verifies 
that n, the number to be tested for primality, is odd, is not a per- 
fect square, and is not divisible by any small prime less than some 
convenient limit. 

The proofs of the properties above and some additional infor- 
mation see, for example, in [Brot64], [Buch09], [Cohn64], [Cohn65], 
[DeKo18]}. 


Factorization of composite Mersenne 
numbers 


5.5.12. Integer factorization is the process of determining which 
prime numbers divide a given positive integer. Doing this quickly 
has applications in Cryptography. The difficulty depends on both 
the size and form of the number and its prime factors; it is cur- 
rently very difficult to factorize large semiprimes, i.e., products of 
two large primes (and, indeed, most numbers which have no small 
factors). 

Since they are prime numbers, Mersenne primes are divisible only 
by 1 and by themselves. However, not all Mersenne numbers are 
Mersenne primes, and the composite Mersenne numbers may be fac- 
tored non-trivially. 

Mersenne numbers are very good test cases for the special number 
field sieve (SNFS) algorithm. 

The special number field sieve (SNFS) is a integer factorization 


algorithm, which is efficient for integers of the form r° + s, where r 
and s are small. 

For Mersenne numbers, r = 2, and s = 1; it is a simplest possible 
case. So often the largest number factorized with this algorithm has 
been a Mersenne number. 

It is also efficient for any integers which can be represented as a 
polynomial with small coefficients. This includes integers of the more 


general form ar® + bs/, and also for many integers whose binary 
representation has low Hamming weight (sum of binary digits). 

The reason for this is as follows: the SNFS performs sieving in two 
different fields. The first field is usually the rationals. The second is a 
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higher degree field. The efficiency of the algorithm strongly depends 
on the norms of certain elements in these fields. When an integer 
can be represented as a polynomial with small coefficients, the norms 
that arise are much smaller than those that arise when an integer is 
represented by a general polynomial. 

The special number field sieve can factorize numbers with more 
than one large factor. If a number has only one very large factor then 
other algorithms can factorize larger numbers by first finding small 
factors and then making a primality test on the cofactor. 

The SNFS has been used extensively by NFSNET (National Sci- 
ence Foundation Network, US), NFS@Home (a research project that 
uses Internet-connected computers to do the factorization of large 
integers), and others to factorise numbers of the Cunningham project 


(a project, started in 1925, to factor numbers of the form 6”+1). For 
some time the records for integer factorization have been numbers 
factored by SNFS. 

As of 2020, the number 2!19? — 1 is the record-holder, having been 
factored with a variant of the special number field sieve that allows 
the factorization of several numbers at once. 

Moreover, the largest factorization with probable prime factors 
allowed is 


27313983 _ 1 — 305492080276193 - g, 


where q is an 2201714-digit probable prime. It was discovered in 2018 
by O. Kruse. 


However, the Mersenne number Mj977 = 2!277 


— 1 is the smallest 
composite Mersenne number with no known factors; it has no prime 
factors below 2°". 

Prime exponents p of composite Mersenne numbers.are 11, 23, 29, 
37, 41, 43, 47, 53, 59, 67, ... (sequence A054723 in the OEIS). 

For such p, prime factors of M, = 2? — 1, ordered by increasing 
p, then by increasing size of the factors, are 23, 89; 47, 178481; 233, 
1103, 2089; 223, 616318177; 13367, 164511353; ... (sequence A244453 
in the OEIS). 

See [Bras88], [DeKo18], [DiHe76], [Kerc83], [Prim20], [Salo90], 
[Wiki20]. 
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Pseudorandom Number Generation and 
Fermat numbers 


5.5.13. Pseudorandomness measures the extent to which a sequence 
of numbers, “though produced by a completely deterministic and 
repeatable process, appear to be patternless.” 

A pseudorandom number generator (PRNG) is an algorithm for 
generating a sequence of numbers whose properties approximate the 
properties of sequences of random numbers. 

The PRNG-generated sequence is not truly random, because it is 
completely determined by an initial value, called the PRNG’s seed 
(which may include truly random values). 

Although sequences that are closer to truly random can be gen- 
erated using hardware random number generators, pseudorandom 
number generators are important in practice for their speed in num- 
ber generation and their reproducibility. 

PRNGs are central in applications such as Simulations, Electronic 
Games, and Cryptography. 

A linear congruential generator (LCG) is an algorithm that yields 
a sequence of pseudo-randomized numbers calculated with a discon- 
tinuous piecewise linear equation. The method represents one of the 
oldest and best-known pseudorandom number generator algorithms. 
The theory behind them is relatively easy to understand, and they 
are easily implemented and fast, especially on computer hardware 
which can provide modular arithmetic by storage-bit truncation. 

The generator is defined by the recurrence relation 


Xn41 = aX, + c(mod m), 


where X is the sequence of pseudorandom values, and m,0 < m 
(the modulus), a,0 < a < m (the multiplier) c,0 < c¢ < m (the 
increment) Xo, 0 < Xo < m (the seed or start value) are integer con- 
stants that specify the generator. If c = 0, the generator is often 
called a multiplicative congruential generator (MCG), or Lehmer 
RNG. 

Fermat primes are particularly useful in generating pseudo- 
random sequences of numbers in the range 1,...,N, where N is a 
power of 2. 
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The most common method used is to take any seed value between 
1 and P — 1, where P is a Fermat prime. Now multiply this by 
a number A, which is greater than the square root of P and is 
a primitive root modulo P (i.e., it is not a quadratic residue). 
Then take the result modulo P. The result is the new value for the 
PRNG: 


Vj41 = A-V;j(mod P). 


This is useful in Computer Science since most data structures have 
members with 2* possible values. 

For example, a byte has 256 = 2° possible values 0, 1, 2,..., 
255. Therefore, to fill a byte or bytes with random values, a random 
number generator which produces values 1-256 can be used. 

Very large Fermat primes are of particular interest in Data 
Encryption for this reason. 

This method produces only pseudorandom values as, after P — 1 
repetitions, the sequence repeats. A poorly chosen multiplier can 
result in the sequence repeating sooner than P — 1. 

Some additional information see, for example, in [Bras88] 
[DeKo18], [Prim20], [Salo90], [Wiki20]. 


Exercises 
1. Check the primality of 71 using the Lucas primality test. 


2. Check the primality of 27457 using the Pocklington—Lehmer pri- 
mality test. 


3. Check the primality of 27457 using the Generalized Pocklington 
test. 


4. Construct first ten elements of the sequence U,,(1, —1); check, that 
it gives the Fibonacci numbers. 


5. Construct first ten elements of the sequence V,,(1, —1); check, that 
it gives the Lucas numbers. 


6. Construct first ten elements of the sequence U,,(3, 2); check, that 
it gives the Mersenne numbers. 
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7. Construct first ten elements of the sequence V,,(3, 2); check, that 
it gives the numbers 2” + 1. Prove, that F;, = Von(3, 2). 


8. Check the property “if n]m, then U;, divides U,,” for the first 
ten elements of the sequences U;,,(1,—1) and U;,(3, 2). Prove this 


property. 


9. Check the property “if n|m is odd, then V,, divides V,,” for the 
first ten elements of the sequences V,,(1,—1) and V,,(3,2). Prove 
this property. 


5.6 Open problems 


5.6.1. Computational Complexity Theory focuses on classifying com- 
putational problems according to their resource usage, and relating 
these classes to each other. 

In contemporary language, a computational problem is a task 
which is solvable by a computer, i.e., by mechanical application of 
mathematical steps, such as an algorithm. 

A problem is regarded as inherently difficult if its solution requires 
significant resources. The theory formalizes this intuition, by intro- 
ducing mathematical models of computation to study these problems 
and quantifying their computational complexity, i.e., the amount of 
resources needed to solve them, such as time and storage. 


P versus NP problem 


5.6.2. A major unsolved problem in Computer Science is P versus 
NP problem (or P 4 NP problem). 

It is one of the seven Millennium Prize Problems selected by the 
Clay Mathematics Institute, each of which carries a US$1000000 
prize for the first correct solution. 

It asks whether every problem whose solution can be quickly veri- 
fied can also be solved quickly. 

The informal term quickly, used above, means the existence of an 
algorithm solving the task that runs in polynomial time, such that 
the time to complete the task varies as a polynomial function on the 
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size of the input to the algorithm (as opposed to, say exponential 
time). 

The general class of questions for which some algorithm can pro- 
vide an answer in polynomial time is called class P (or just P). 

For some questions, there is no known way to find an answer 
quickly, but if one is provided with information showing what the 
answer is, it is possible to verify the answer quickly. The class of 
questions for which an answer can be verified in polynomial time 
is called class NP (or just NP), which stands for nondeterministic 
polynomial time. 

An answer to the P versus NP question would determine whether 
problems that can be verified in polynomial time can also be solved 
in polynomial time. If it turned out that P #4 NP, which is widely 
believed, it would mean that there are problems in NP that are harder 
to compute than to verify: they could not be solved in polynomial 
time, but the answer could be verified in polynomial time. 

Aside from being an important problem in Computational The- 
ory, a proof either way would have profound implications for Math- 
ematics, Cryptography, Algorithm Research, Artificial Intelligence, 
Game Theory, Multimedia Processing, Philosophy, Economics and 
many other fields. 


5.6.3. The complexity class P is often seen as a mathematical 
abstraction modeling those computational tasks that admit an effi- 
cient algorithm. It contains all decision problems that can be solved 
by a deterministic Turing machine using a polynomial amount of 
computation time, or polynomial time. 

The complexity class NP, on the other hand, contains many prob- 
lems that people would like to solve efficiently, but for which no effi- 
cient algorithm is known. It is the set of decision problems solvable 
in polynomial time by a non-deterministic Turing machine. 

An equivalent definition of NP is the set of decision problems for 
which the problem instances, where the answer is “yes”, have proofs 
verifiable in polynomial time by a deterministic Turing machine. 

These two definitions are equivalent because the algorithm based 
on the Turing machine consists of two phases, the first of which 
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consists of a guess about the solution, which is generated in a non- 
deterministic way, while the second phase consists of a deterministic 
algorithm that verifies if the guess is a solution to the problem. 

Since deterministic Turing machines are special non-deterministic 
Turing machines, it is easily observed that each problem in P is also 
member of the class NP. 

NP-complete problems are a set of problems to each of which any 
other NP-problem can be reduced in polynomial time and whose 
solution may still be verified in polynomial time. That is, any NP- 
problem can be transformed into any of the NP-complete problems. 
Informally, an NP-complete problem is an NP-problem that is at 
least as “tough” as any other problem in NP. 

If P # NP then there exist problems in NP that are neither in P 
nor NP-complete. Such problems are called NP-intermediate prob- 
lems. The integer factorization problem and the discrete logarithm 
problem are examples of problems believed to be NP-intermediate. 
They are some of the very few NP-problems not known to be in P 
or to be NP-complete. 

For an additional information see, for example, [Bras88] [DeKo18], 
[Kob187], [Salo90], [Wiki20]. 


Can integer factorization be done in 
polynomial time on a classical 
(non-quantum) computer? 


5.6.4. The integer factorization problem is the computational prob- 
lem of determining the prime factorization of a given integer. 

No efficient integer factorization algorithm is known, and this fact 
forms the basis of several modern cryptographic systems, such as the 
RSA algorithm. 

No algorithm has been published that can factor all integers in 
polynomial time, that is, that can factor an b-bit number n in time 
O(b") for some constant k. Neither the existence nor non-existence 
of such algorithms has been proved, but it is generally suspected 
that they do not exist and hence that the problem is not in class P. 
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The problem is clearly in class NP, but it is generally suspected that 
it is not NP-complete, though this has not been proven. 

The best known algorithm for integer factorization is the general 
number field sieve (GNFS), which takes time 


to factor an odd integer n. 

However, the best known quantum algorithm for this problem, 
Shor’s algorithm, does run in polynomial time. This is almost expo- 
nentially faster than the general number field sieve, which works in 
sub-exponential time. 

Unfortunately, this fact doesn’t say much about where the prob- 
lem lies with respect to non-quantum complexity classes. 

At the same time, the inverse problem, integer multiplication, is 
not difficult. It is easy to shows that such an algorithm of the mul- 
tiplication of two d-digit numbers x and y, y < x, is implemented in 
O(d*) operations for some fixed k < 2, so the complexity of comput- 
ing «-y is given by 


O((log x)*). 


So, today no efficient integer factorization algorithm is known, 
and this fact forms the basis of several modern cryptographic sys- 
tems, such as the RSA algorithm. 

In contrast, the decision of problem Is n a composite number? 
(or equivalently Is n a prime number?) appears to be much easier 
than the problem of specifying factors of n. This composite/prime 
problem can be solved in polynomial time in the number 6 of digits 
of n with the Agrawal—Kayal-Sazena primality test (2002). 

In addition, there are several probabilistic algorithms that can 
test primality very quickly in practice if one is willing to accept a 
vanishingly small possibility of error. 

The ease of primality testing is a crucial part of the RSA algo- 
rithm, as it is necessary to find large prime numbers to start with. 

For an additional information see, for example, [Bras88], 
[DeKo18], [Kob187], [Salo90], [Wiki20]. 
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Is Public-key Cryptography possible? 


5.6.5. We don’t know for sure that Public-key Cryptography is safe. 
It could be, for example, that RSA can be broken in polynomial time 
if factoring can be done efficiently. 

In Cryptography, the RSA problem summarizes the task of per- 
forming an RSA private key operation given only the public key. 

The RSA algorithm raises a message to an exponent, modulo a 
composite number N whose factors are not known. Thus, the task 
can be neatly described as finding the e-th roots of an arbitrary 
number modulo JN. 

For large RSA key sizes (in excess of 1024 bits), no efficient 
method for solving this problem is known; if an efficient method is 
ever developed, it would threaten the current or eventual security of 
RSA-based cryptosystems, both for Public-key encryption and digi- 
tal signatures. 

More specifically, the RSA problem is to efficiently compute P 
given an RSA public key (N,e) and a ciphertext 


C = P*(mod N). 
The structure of the RSA public key requires that 


e N=p-q,p,¢€ P(N bea product of two large prime numbers, 
i.e., a large semiprime); 


e2<e< ¢(N); 
e gcd(e, P(N)) = 1 (e be coprime ¢(N)); 


e0<C < N (C be a smallest nonnegative residue modulo N, 
chosen randomly). 


To specify the problem with complete precision, one must also specify 
how N and e are generated, which will depend on the precise means 
of RSA random key pair generation in use. 

The most efficient method known to solve the RSA problem is 
by first factoring the modulus N, a task believed to be imprac- 
tical if N is sufficiently large, due to the integer factorization 
problem. 
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The RSA key setup routine 
ed = 1(mod @(N)), 1<d< @(N), 


already turns the public exponent e, with this prime factorization, 
into the private exponent d, and so exactly the same algorithm allows 
anyone who factors N to obtain the private key. Any C’ can then be 
decrypted with the private key. 

Just as there are no proofs that integer factorization is computa- 
tionally difficult, there are also no proofs that the RSA problem is 
similarly difficult. 

By the above method, the RSA problem is at least as easy as 
factoring, but it might well be easier. 

Indeed, there is strong evidence pointing to this conclusion: that a 
method to break the RSA algorithm cannot be converted necessarily 
into a method for factoring large semi-primes. 

This is perhaps easiest to see by the sheer overkill of the fac- 
toring approach: the RSA problem asks us to decrypt one arbitrary 
ciphertext, whereas the factoring method reveals the private key: 
thus decrypting all arbitrary ciphertexts, and it also allows one to 
perform arbitrary RSA private key encryptions. 

Along these same lines, finding the decryption exponent d indeed 
is computationally equivalent to factoring N, even though the RSA 
problem does not ask for d. 

A different, unrelated problem with RSA is that it can be bro- 
ken by quantum computers. This is an unrelated problem since 
the definition of a secure Public-key cryptosystem only requires 
that the cryptosystem not be breakable by classical (non-quantum) 
computers. 

For additional information see, for example, [Bras88], [DeKo18], 
[Kob187], [Salo90], [Wiki20]. 


Can the discrete logarithm be computed 
in polynomial time? 


5.6.6. In the field R of real numbers, the log, a is a number x such 
that b* = a, for given numbers a > 0 and b>0,b4 1. 
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Analogously, in any group G, powers b* can be defined for all 
integers k, and the discrete logarithm log, a is an integer k such that 
b* = a. In Number Theory, the more commonly used term is indez. 

Discrete logarithms are quickly computable in a few special cases. 

For example, in the group of the integers modulo p under addition, 
the power b* becomes a product bk, and equality means congruence 
modulo p in the integers. The extended Euclidean algorithm finds k 
quickly. 

However, no efficient method is known for computing them in 
general. 

A general algorithm for computing log,a in a finite group G is 
to raise b to larger and larger powers k until the desired a is found. 
This algorithm is sometimes called trial multiplication. It requires 
running time linear in the size of the group G and thus exponential 
in the number of digits in the size of the group. Therefore, it is an 
exponential-time algorithm, practical only for small groups G. 

However, there is an efficient (polynomial) quantum algorithm 
due to Peter Shor. 

Several important algorithms in Public-key Cryptography, includ- 
ing digital signature algorithm (DSA), base their security on the 
assumption that the discrete logarithm problem over carefully cho- 
sen groups has no efficient solution. 

While computing discrete logarithms and factoring integers are 
distinct problems, they share some properties: 


e both problems seem to be difficult (no efficient algorithms are 
known for non-quantum computers); 


e for both problems efficient algorithms on quantum computers are 
known; 


e algorithms from one problem are often adapted to the other; 


e the difficulty of both problems has been used to construct various 
cryptographic systems. 


At the same time, the inverse problem of discrete exponentiation 
is not difficult. It can be computed efficiently using exponentiation 
by squaring, for example. 
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A brief analysis shows that such an algorithm uses |log, n| squar- 
ings and at most |log,n| multiplications, where | | denotes the floor 
function. 

Each squaring results in approximately double the number of dig- 
its of the previous, and so, as multiplication of two d-digit numbers 
is implemented in O(d") operations for some fixed k, then the com- 
plexity of computing x” is given by 

O(log n) 
>; (2'O(log x))* = O((nlogx)*). 
i=0 

This asymmetry is analogous to the one between integer factor- 
ization and integer multiplication: the complexity of computing x- y, 
y < @ is given by 


O((log x)*). 


Both asymmetries (and other possibly one-way functions) have 
been exploited in the construction of cryptographic systems. 

For additional information see, for example, [Buch09], [Bras88}, 
[DeKo13], [DeKo18], [Kob187], [Salo90], [Wiki20]. 


Exercises 


1. Prove, that the complicity of an algorithm of the addition x + y 
of two positive integer numbers x,y, y < x, is O(log x). 


2. Prove, that the complicity of an algorithm of the subtraction x—y 
of two positive integer numbers x,y, y < x, is O(log x). 


3. Prove, that the complicity of an algorithm of the multiplication 
x-y of two positive integer numbers x,y, y < 2, is O(log? x). 

4. How many operations of multiplication can be used for calculation 
of 210°? Check, that it can be reduced to 8 instead of 99. 


5. Prove, that an algorithm of the exponentiation x7”, 2,n € N, 
requires O(log n) multiplications. 


6. Prove, that the complexity of an algorithm of the exponentiation 
x” modulo N, 2,n,N EN, is O(log? N). 
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7. Prove, that the complicity of an algorithm of the finding of 
gcd(x, y) of two positive integer numbers x,y, y < x, is O(log? 2). 


8. Prove, that the complicity of an algorithm of the finding of the 
factorial x! of a positive integer x is O(n? log? x). 
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Chapter 6 


Zoo of Numbers 


In this chapter we collected some remarkable individual special 


numbers, related to Mersenne and Fermat numbers (see [DeDel12], 
[Deza17], [Deza18], [LeLi83], [SIP195], [Weis99], [Weis20], [Wiki20], 
etc.). 


2: the only even prime. 


3: the first odd prime; the first Fermat prime, Fo. The first 
Mersenne prime, Mo; the only Fibonacci prime that is also a tri- 
angular number. 


5: the second Fermat prime, F ; the only prime digit in which a 
perfect square can end; the only prime whose square is composed 
of only prime digits. 


6: the first perfect number; the only mean att between a pair of 


twin primes which is triangular; the only known even number n 
such that both numbers n”—(n+1) and n”+(n+1) are primes (in 
fact, primes 46649 and 46663); the largest known number n such 
that there are n integers for which all pairwise sums are perfect 
squares. 


7: the third Mersenne prime, M3; the only prime p such that p+ 1 
is a perfect cube; the smallest centered hexagonal prime; the small- 
est cuban number, i.e., a number of the form (n +1)? —n°; the only 
prime equal to the difference of the product and the sum of the 
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two previous primes; the only prime that is member of two pairs of 
cousin primes; the biggest (besides 4 and 5) known solution of the 
Brocard’s problem: to find integers n such that n! + 1 is a perfect 
square; the largest known prime that is not the sum of a triangular 
number, a square, and a cube, all of them positive. 


e 8: the largest Fibonacci number of the form p+ 1 or p— 1 for 
a prime p; the largest composite number such that all its proper 
divisors plus 1 are primes. 


e 9: the only known composite number n such that both 2” + n? 
and 2” — n? are primes (in fact, the primes 431 and 593). 


e 10: the only number with the property that the sum as well as 
the difference of its prime divisors are primes (2 + 5 = 7, and 
5—-2=8). 


e 11: the smallest prime repunit; the smallest prime strobogram- 
matic number; the only prime (2- 3+ 5) of the form p, - p2 + p3, 
where p1, p2, p3 are consecutive primes; the only prime that can be 
expressed (2? + 3 = 37+2) by two consecutive primes in the forms 
pt +q and q? + p; the largest integer that cannot be expressed as 
a sum of at least two distinct primes; the largest number which is 
not expressible as sum of two composite numbers. 


e 12: the only number n such that n+ 1,5 +1 and 3+ 1 are all 


primes. 


e 13: the only prime that can divide two successive integers of 
the form n? + 3; the only prime sum (2? + 3?) of squares of 
two consecutive primes; the only Fibonacci prime sum of squares 
of two consecutive Fibonacci primes; the prime whose square is 
equal to the sum of squares of all digits in which primes end: 
13? = 12 4+ 2? + 374 524+ 72 + 92: the largest known Fibonacci 
prime with index of a Fibonacci prime; the smallest prime having 
exactly one representation as a sum of squares greater than one 
(31, its reversal, is the largest one). 


e 15: the smallest Mersenne composite, M4; the product of two con- 
secutive Fermat primes, 3 and 5 (thus, a regular polygon with 15 
sides is constructible with compass and unmarked straightedge); 
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the smallest number that can be factorized using Shor’s quantum 
algorithm. 


16: the largest known integer n for which 2" + 1 (in fact, Fy) is 
prime; the only integer of the form n™ = m” for distinct integers 
nand m: 16=2° =4?, 

17: the third Fermat prime, Fo; the only prime that is the average 
(eH) of two consecutive Fibonacci numbers; the only prime that 
is the sum (17 = 2+3+5+7) of 4 consequtive primes; the only 
prime of the form p? + q?, where p and q are primes: 17 = 2? +. 3?; 
the only number n having n partitions into prime parts; the largest, 
if Goldbach’s conjecture is true, integer which is not the sum of 
three distinct primes; the only prime number of the form p? + 8; 
the smallest prime whose sum of the digits is a cubic number; the 
only known prime that is equal to the sum of digits of its cube: 
17? = 4913, and 4+9+1+3 = 17; the smallest prime that 
is the quartan, i.e., the sum of two biquadratic numbers: 17 = 
1442+: 17? can be expressed as the sum of 1, 2,3, 4,5,6,7,8 distinct 
squares. 


23: the smallest odd prime that is not a twin prime; the largest 
integer n such that no factor of a binomial coefficient a) isa 
perfect square; the biggest, besides 2,3,5,7,11, prime which is 
uniquely expressible as a sum of at most four squares. 


24: the sum of the twin primes 11 and 13; the only integer n > 1 
such that )>"_, i? is a perfect square: ear = 70". 


25: the third Cullen number 3 - 2° + 1; the smallest Fermat pseu- 
doprime modulo 7, i.e., satisfying the congruence 7” = 7(mod n); 
the only perfect square of the form k? — 2. 


26: the largest integer n such that the segment |[m,m + 100] con- 
tains n primes (it happens only for m = 2). 

28: the second perfect number; the only perfect number of the 
form n* + m* with k > 1: 28 = 3° +13. 


29: the only two-digital prime whose square is the sum of squares 
of two consecutive two-digital numbers: 29? = 20? + 217; the 
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smallest prime equal to the sum of three consecutive squares: 
29 = 2?4 374 4?; the smallest multi-digital prime which on adding 
its reverse gives perfect square: 29+92 = 117; the only non-titanic 
prime (i.e., with less than 1000 decimal digits) of form p? 4+ 2. 


e 30: the only integer n, besides 0,3,8,10,18 and 24, such that the 
number of its divisors is equal to the number of integers k,0 < k < 
n, which are coprime with n; the largest integer n such that all 
integers k,0 < k <n, which are coprime with n, are also prime. 


e 31: the third Mersenne prime, Ms; the smallest prime that can be 
represented as a sum of two triangular numbers in two different 
ways: 31 = 214 10 = 28+4 3; the smallest prime that can be 
represented as a sum of two triangular numbers with prime indices; 
there are only 31 numbers that cannot be expressed as a sum of 
distinct squares; 3+5+7+11+---+89 =31?, ie., a sum of the 
first 31 odd primes is a square of prime. 


e 33: the smallest odd repdigit that is not a prime number; the 
largest integer which is not a sum of distinct triangular numbers. 


e 36: the smallest perfect square expressible as a sum of four con- 
secutive primes which are also two couples of prime twins: 36 = 
5+ 7+ 114 18; the smallest triangular number whose sum of 
divisors, as well as sum of its proper divisors, is also a triangular 
number. 


e 41: the only known prime number that is not a sum of two 
triangular numbers and a nonnegative cube; the smallest prime 
whose cube can be written as a sum of three cubes in two ways: 
A1? = 40° + 173 + 2° = 33° + 323 + 63; a sum of two consecutive 
squares: 4? + 5?. 


e 42: the smallest number n such that n? is the mean of cubed twin 
primes, 42? = Ps 

e 65: the only number which gives a square of prime on adding as 
well as subtracting its reverse from it: 65+56 = 11°, 65-56 = 3?; 
the only number which is the difference (34 —2+*) of two biquadratic 
numbers with prime indices; (65!)? + 1 is prime. 
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67: the smallest multi-digital prime whose square 4489 and cube 
300763 consist of different digits. 


81: the only known square n such that n-2” — 1 is a prime. 


83: the largest known prime that can be expressed as a sum of 
three positive triangular numbers in exactly one way; the smallest 
prime whose square 6889 is a strobogrammatic number; the only 
prime equal to a sum of squares of odd primes: 83 = 3? +5? + 7?; 
the only prime of the form p* + 2, where p is a prime. 


89: the smallest positive integer whose square 7921 and cube 
704969 are likewise primes upon reversal. 


100: the smallest perfect square whose summation of the differ- 
ences between itself and each of its digits, where each difference is 
raised to the power of the corresponding digit, is equal to a prime: 
101 = (100 — 1)! + (100 — 0)° + (100 — 0)° is a prime. 


101: the smallest 3-digital strobogrammatic prime; the smallest 
3-digital palindrome prime. 


109: the smallest number (coincidentally prime) that has more 
distinct digits than its square 11881; a strobogrammatic prime, 
which is equal to the square root of the strobogrammatic number 
11881 (or 118 —8— 1). 


113: the smallest prime which is a sum of three biquadratic num- 
bers with prime indices: 113 = 24+ 24+ 37. 


121: the only perfect square of the form 1+ p+p?+p?+p4, p € 
P: 121 =1+3+43° +3? 4+ 34; the only, besides 4, perfect square 
of the form n? — 4 (121 = 5° — 4). 


127: the 4-th Mersenne prime, M7; the exponent for 12-th 
Mersenne prime Mj97 = 2!27 — 1 (it is the largest prime ever dis- 
covered by hand calculations, as well as the largest known double 
Mersenne prime); the first nice Friedman number (the representa- 
tion 127 = 2" — 1 uses all digits 1, 2, 7); the smallest prime that 
can be written as the sum of the first two or more odd primes 
(127 =34+5+74+11413417+419 + 23 + 29). 
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e 144: the largest, besides 0 and 1, perfect square, which is a 
Fibonacci number; the sum of a twin prime pair (71; 73). 


e 149: the only known prime in the concatenate square sequence. 


e 169: the largest Pell number (i.e., a member of the recurrent 
sequence Pio = 2Py41+ Pr, Po = 0,P, = 1), which is a per- 
fect square; the smallest composite Pell number with a prime 
index. 


e 173: the largest known prime whose square 29929 and cube 
5177717 consist of different digits. 


e 191: a palindromic prime whose square 36481 is a distinct-digital 
number whose first two digits, central digit, and last two digits, 
are perfect squares. 


e 196: the smallest candidate Lychrel number, i.e., a natural number 
which cannot form a palindrome through the iterative process of 
repeatedly reversing its base 10 digits and adding the resulting 
numbers; in fact, 196 does not yield a palindrome after 700 000 
000 iterations. 


e 211: the largest known prime that cannot be written as a sum of 
a prime and a positive triangular number. 


e 216: the smallest cubic number, which is a sum of three cubic 
numbers: 216 = 6° = 5° + 4? +.3°. 


e 229: replacing each digit of prime 229 with its square, respectively 
its cube, results in two new primes (4481 and 88729) with a palin- 
dromic difference of 84248; coincidentally, 229 + 4481 + 88729 is 
palindromic as well. 


e 239: a Chen prime (241 is a prime); a Sophie Germain prime (479 
is a prime); the largest, besides 23, integer, which is not a sum of 
less than 9 cubic numbers: 239 = 2-42 + 4-334 3-1°, 


e 257: the 4th Fermat prime, F3; the largest prime in a sequence 
of fifteen primes of the form 2n + 17, where n runs through the 
first 15 triangular numbers. 
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277: the square 76729 of the prime 277 is the smallest square with 
5 or more digits that is the concatenation of three primes (7, 67, 
and 29). 


289: the square of the sum of the first four primes: 289 = (2+3+ 
5+7)?. 


343: the only, cubic number (7%) besides 1, such that the sum of 
its divisors is a perfect square: 1+ 7+ 77+ 7? = 207; a Friedman 
number, as is the result of a non-trivial expression using all its own 
digits, 343 = (3 + 4)°. 


367: the largest number (in fact, prime) whose square 134689 has 
strictly increasing digits. 


400: the only known square of the form 1 + k + k? + k?, where 
k © N\{1} (in fact, k = 7). 


407: the largest, besides 1,153,370 and 371, integer, which is the 
sum of cubes of their decimal digits. 


463: the smallest multi-digital prime such that both a sum of dig- 
its and product of digits of its square remain squares. 


496: the third perfect number; the smallest triangular number 
such that the sum of the cubes of its digits is prime: 4° -+9°+6° = 
1009. 


514: 19-th centered triangle number; a constructible number, 
because 514 = 2. 257 is a power of two times the product of 
Fermat primes. 


541: the 100-th prime number, the 10-th hexagonal star (i.e., Star 
of David) number. 


576: the only known perfect square represented as a difference 
between a squared sum of consecutive primes and the sum of their 
squares: 576 = 242 = (2+3+54+7+11)?—(27+37+57+774+117); 
it is the only such case for all primes up to 2-109. 


613: a prime which gives a mathematical enigma in the story 
Number of the End by Jason Earls: bring the first digit back to 
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get 136, it is triangular, now bring the first digit of that back to 
get 361, it is a square; the square of 613 = 375769 is the largest 
known perfect square that divides a number of the form n! + 1, 
which happens when n = 229, another prime. 


e 631: a prime which is the reverse concatenation of the first three 
triangular numbers. 
A constructable number because 640 = 2” - 5 is a power of two 
times product of Fermat primes. 


e 641: the prime divisor of the smallest Fermat composite, F5: Fs = 
4294967297 = 641 - 6700417. 


e 691: the only known prime which is a square 169 when turned 
upside down and another square 196 when reversed; moreover, 
169 and 196 are the smallest consecutive squares using the same 
digits. 

e 701: the smallest prime whose square (491401) contains all of 
square digits only; it is equal to 54 + 435 + 3? +214 19, 


e 727: the first prime whose square (528529) can be represented as 
the concatenation of two consecutive numbers. 


e 773: replacing each digit of prime 773 with its square respectively 
its cube results in two new primes 49499 and 34334327; this latter 
number is also an emirp (72343343 is a prime). 


e 786: the largest known number n such that the binomial coeffi- 
cient ‘es is not divisible by the square of an odd prime. 


e 900: the smallest perfect square which is a sum of different 
primes by using all the ten digits: 900 = 503+ 241+ 89+ 67 = 
509 + 283 + 61 + 47. 


e 919: a prime, which is also the 18-th centered hexagonal number. 
One can use the digits of 919 to write 18 = (9-1) +9 = 9+ 
(129). 


e 2047: the first Mersenne composite with prime index, Mj. 
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65537: the biggest known Fermat prime, FY. 
4294967297: the smallest Fermat composite (in fact, semi- 
prime), Fs. 


10!°°: one googol; in decimal notation, it is written as the digit 1 


followed by one hundred zeroes; a googol is approximately 70!; 1 
poogol Ay 2284 e2s0es. 


22° +1 = 2512 4 1: the first Fermat number, /F9, greater than 
googol, i.e., having more 100 digits (in fact, 154 digits). 


2317006...230657 = 27) +1 = 27948 4 1: the biggest com- 
pletely factored Fermat number, Fj;; it has 617 digits; it is a 


gil 


product of five prime numbers with 6, 6, 21, 22 and 564 decimal 
digits. 

1000...0007 = 10°°9 + 7: the smallest titanic prime, i.e., a prime 
of at least 1000 decimal digits. 


24253 _ 1: the smallest Mersenne titanic prime, M4253; 19-th 


Mersenne prime; it has 1281 digits. 
22° 4.1: the smallest Fermat number, F33, with unknown charac- 
ter. 


1000...00033603 = 10%°° + 33603: the smallest gigantic prime, 
i.e., a prime number with at least 10000 decimal digits; it has 
exactly 10000 digits. 


244497 _ 1: the smallest Mersenne giganic prime, My4,497; 27-th 


Mersenne prime; it has 13395 digits. 


191273 - 29821908 _ 1: the smallest known megaprime, i.e., a prime 
with at least one million decimal digits; it has exactly 1000000 
digits. 

26972593 _ 1: the smallest Mersenne megaprime, Mgg972593; 38-th 


Mersenne prime; it has 2098960 digits. 


282589933 _ 1: the biggest known Mersenne prime, Mgo589933; 51-th 


known Mersenne prime; it has 24862048 digits. 
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e 1910 = 199979; one googolplez; written out in ordinary decimal 
notation, it is 1 followed by 10! zeroes, that is, a unity followed 
by a googol zeroes. 


e 22°" 41: the first Fermat number, F334, greater than googoplex. 


o 2278789" 41: the largest known composite Fermat number, 


F'139339543 it has the prime factor p= 7: giezoenG +1. 


Chapter 7 


Mini Dictionary 


In this Chapter, a Mini Dictionary, i.e., the list of all special num- 


bers, relative to Mersenne and Fermat numbers, is represented (see 
[CoGu96], [DeDe12], [Deza17], [Deza18], [Weis20], [Wiki20], etc.). 


n € N, o(n) > 2n — abundant number: positive integers, for which 
their sum of proper divisors is greater than the number itself. 


(m,n), m,n € N, o(n) = o(m) = n+m — amicable numbers: a 
pair of positive integers which are the sum of each other’s proper 
divisors. 

A= Fs _, (",') B(k) with B(0) = 1 — Bell number. 

Bn = SES 5 ae (Fe | Bnk with Bo = 0 — Bernoulli number. 
BC(n) = n4, n = 1,2,3,... — biquadratic number. 


(hh n = 0,1,2,..., m = 0,1,...,.n — binomial coefficient; they 
form the Pascal’s triangle — number triangle, the sides of which 
are formed by 1, and any inner entry is obtained by adding the 


two entries diagonally above. 


n € S, a! = 1(mod n) for any a € Z, a coprime to n — 
Carmichael number: numbers n that are Fermat pseudoprimes to 
any base a coprime to n. 


Ca(n) = 4" — 271 — 1, n =1,2,3,... — Carol number. 
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eC,= i (en?) n = 1,2,3,... — Catalan number. 


ep © P, such that p+2 € P,orp+2=M-@, 4,2 € P— 
Chen prime: prime numbers p, such that p+ 2 are either primes 
or semiprimes (a product of two primes). 


en = 2"-p,-...: pe, where r € Z, r > 0, and p, < ... < px are 
distinct Fermat primes — constructible number: line segment of 
length n can be constructed with compass and straightedge in a 
finite number of steps. 


e (p,p+4), p,p+4e€ P — cousin primes. 


e (n+1)? —n3, n =1,2,3,... — cuban number. 
e C(n) = n3, n= 1,2,3,... — cubic number (or cube number). 
e Cu(n) =n-2"4+1,n=1,2,3,... — Cullen number. 


e NEN, a(n) < 2n — deficient number: positive integers, for which 
their sum of proper divisors is less than the number itself. 


e 2,3, 7, 23, 37, 53, ... — digit prime: prime numbers that has only 
prime digits 2, 3, 5, or 7. 


e D(n) = oo , n = 1,2,3,... — dodecahedral number. 
e My, = 2?"-l_1. n=1,2,3,... — double Mersenne number. 


e (1 +w)” — 1, where w = sis | ? = -1,n = 1,2,3,... — 
Eisenstein Mersenne number. 


e 13, 17, 31, 37, 71, ... — emirp: prime numbers that result in dif- 
ferent primes when its decimal digits are reversed. 


e F, = 27° +1,n=0,1,2,... — Fermat number. 
en € S, n is odd, a”! = 1(mod n) — Fermat pseudoprime to 
base a. 


© Un42 = Unti + Un, UL = U2 = 1 — Fibonacci number. 


e@ 25, 121, 125, 126, 127, ... — Friedman number: positive integers, 
represented as the result of a non-trivial expression using all its 
own digits (e.g., 25 = 5?; 121 = 117; 343 = (3 + 4), etc.). 
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(1 +4)” — 1, where 7? = —1, n = 1,2,3,... — Gaussian Mersenne 
numbers. 


F,,(a,b) = a?" +b?", where a and b are coprime integers, such that 


a>b>0, while n = 0,1,2,... — generalized Fermat number. 
MM (a.0) = oe where a and b are coprime integers, such 
that a > 1, and —a < b < a, while n = 1,2,3,... — general- 


ized Mersenne numbers; an important special case is M,,(b,1) = 


GCu(n) = n-b" +1, where n+2 > b — generalized Cullen number. 
GW, =n-b"—1, where n+ 2 > b — generalized Woodall number. 


p € P, p > 10°99 — gigantic prime: prime numbers with at least 
10000 decimal digits. 


Gn(n) = 2n —1, n= 0,1,2,... — gnomonic number. 


néeN, n = pt+q, p,q € P\{2} — Goldbach number: even 
positive integers that can be expressed as the sum of two odd 


primes. 

OH, where a > 1 is an odd positive integer, while n = 0,1, 2,... 
— half generalized Fermat number to an odd base a. 

O(n) = 3(2n—1)(2n? —2n+3), n = 1,2,3,... — Hatty octahedral 
number. 

RDy(n) = (2n—1)(8n? —14n+7), n =1,2,3,... — Hatiy rhombic 


dodecahedral number. 


né€N,n=1+k(o(n) —n—-1) — k-hyperperfect number, k € N; 
hyperperfect number — positive integers which are k-hyperperfect 
numbers for some positive integer k. 


in)= eta n = 1,2,3,... — icosahedral number. 

C¥(n) = n*, n = 1,2,3,... — k-dimensional hypercube number, 
KEN, k>1. 

OF(n) = F209 (-1) ae gk-J-1 9% J (n) — k-dimensional hyper- 


j 
octahedron number, k © N, k > 1. 
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© SE(n) = Sk(n) = nin tt) (tk) n = 1,2,3,... — k-dimensional 
hypertetrahedron number, k © N, k > 1. 

e Skin) = n(n ft) (mth 2) on 2mm FRY?) n = 1,2,3,.. — 
k-dimensional m-gonal pyramidal number, k © N, k > 1. 

e N¥(n) = (n+1)*t! —n*+1, n =1,2,3,... — k-dimensional nexus 
number, k EN, k > 1. 

e Ky(n) = 4" +2"! _1,n=1,2,3,... — Kynéa number. 


© Dasa = Ln4it Ln, Lo = 2, Ly = 1 — Lucas number. 


ep € P, p> 10°98 — megaprime: prime numbers with at least 
one million decimal digits. 


e M, = 2” —1,n=1,2,3,... — Mersenne number. 
e MF(p,r) = s+ — Mersenne-Fermat number; when r = 1, 
Qp7~ +4 


they are Mersenne numbers; when p = 2, they are Fermat numbers. 


© Sim(n) = Miners n = 1,2,3,... — m-gonal number. 


S3 (n) = net ree Bins tote) n = 1,2,3,... — m-gonal pyramidal 


number. 

e P,(n)=m- n?—m-n+1, n= 1,2,3,... — m-gram number; in 
particular, Pg(n) = S(n) = 6n? — 6n +1 — star number. 

e MN, = MNn-1 + Sop MNiMN,_2-i, MNo = MN, = 1 — 
Motzkin number. 

e NEN, o(n) = kn — k-perfect number (or k-fold perfect number): 
the sum of all positive divisors of n is equal to kn, k EN, k > 1; 


multiply perfect number — numbers that are k-perfect for some 
positive integer k > 1. 


e 1, 6, 28, 140, 270, 496, ... — Ore number (or harmonic divisor 
number): positive integers whose divisors have a harmonic mean 


that is an integer (e.g., the harmonic mean ~—+—,—+ of divisors 


4 
TTatsts 
1, 2, 3, 6 of 6 is an integer 2). 
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(abc...cba)i9 — palindromic number (or numeral palindrome, or 
numeric palindrome): positive integers that remain the same when 
their decimal digits (in general, digits in any positional number 
system) are reversed (e.g., 16461). 

2, 3, 5, 7, 11, 18, ... — permutable prime (or absolute prime): 
prime numbers which remain primes on every rearrangement of 
their decimal digits; in general, digits in any positional number 


system (e.g., 337 is a permutable prime because each of 337, 373 
and 733 is prime). 


Prio = 2Prii+ Pr, Po = 0, Pi = 1 — Pell number. 


PLy4yg = 2PIin41+PIn, PLo = 2, PL, = 2— Pell-Lucas number 
(or companion Pell number). 


3, 5, 6, 7, 9, ... — pernicious number: positive integers such that 
the Hamming weights of their binary representations (i.e., the sums 
of binary digits) are primes (e.g., 3 = 112, and 1+1=2,2€ P). 
Ps(n) = 5n? —5n +1, n =1,2,3,... — pentagram number. 

2"3" +1 € P, where u,v € Z, u,v > 0 — Pierpont prime. 

2"3" — 1 © P, where u,v € Z, u,v > 0 — Pierpont prime of the 
second kind. 


n € S, nis odd, 2°-! = 1(mod n) — Poulet number (or Sarrus 
number): Fermat pseudoprime to base 2. 


1, 2, 4, 6, 8, 12, ... — practical number (or panarithmic number): 
positive integers n such that all smaller positive integers can be 
represented as sums of distinct divisors of n. 


P(n) =n(n+1), n= 1,2,3,... — pronic number. 

k-2"+1,k EN, k is odd, k < 2” — Proth number. 

O(n) = ey n = 1,2,3,... — octahedral number. 

n*++m*, n,m = 1,2,3,... — quartan: sums of two biquadratic 


numbers. 
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eneEN, nie) = 2”—1,u> 0, v > 0 — Ramanujan-Nagell 
number: the numbers 0, 1, 3, 15, 4095, which are the only non- 
negative integers which have simultaneously the form weer), u= 


0,1,2,..., and the form 2° — 1, v = 0,1, 2,... 


e (aaa...aaa)i9 — repdigit (or monodigit): positive integers com- 
posed of repeated instances of the same digit in decimal system 
(in general, in any positional number system). 


e (111...111)19 — repuint: positive integers containing only the digit 
1 in decimal system (in general, in any positional number system); 


R= es 

e RD(n) = 4n®—6n?+4n—-1, n = 1,2,3,... — rhombic dodecahedral 
number. 

e 509203, 762701, 777149, 790841, 992077, ... — Riesel number: odd 


positive integers k such that k- 2” — 1 is composite for all natural 
numbers n. 

e g=2p+1€P, where p € P — safe prime; q is the prime number 
2p + 1 associated with a Sophie Germain prime p. 

e 6, 12, 18, 20, 24, 28, ... — semiperfect number: positive integers 
that are equal to the sum of all or some of their proper divi- 


sors; abundant numbers which are not semiperfect are called weird 
number. 


e p-q, p,q € P — semiprime: positive integers, which are product 
of two primes. 


e (p,p+6), p,p+6 € P — sexy primes. 


e 78557, 271129, 271577, 322523, 327739, ... — Sierpiriski number: 
odd positive integers k such that k - 2” + 1 are composite for all 
natural numbers n. 


e p€ P, such that 2p + 1 € P — Sophie Germain prime; the prime 
number q = 2p + 1, associated with p, is called safe prime. 


e S(n) = 6n? —6n+1, n=1,2,3,... — star number. 
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SO(n) = n(2n? — 1), n = 1,2,3,... — stella octangula number. 


S(n,m) = Ae o(-D'() (m — 4)", n = 1,2,3,..,, 1 < men 


u 
— Stirling numbers of the second kind. 
0, 1, 8, 11, 69, 88, 96, 101,... — strobogrammatic number: posi- 
tive integers whose numeral is rotationally symmetric, so that it 
appears the same when rotated 180 degrees. 


p € P, p > 10°? — titanic prime: prime numbers of at least 1000 
decimal digits. 


Tr(n,k) =n+(n4+1)+...+(n+(k-1)), n,k € N\{1} — trapecoidal 
number. 


Q(b,n) = — b> 2,n=1,2,3,... — Wagstaff numbers base b. 


ar € P, where p € P — Wagstaff primes. 


70, 836, 4030, 5830, 7192, ... — weird numbers: abundant numbers 
which are not semi-perfect. 
Wr, = n-2"%-—1, n = 1,2,3,... — Woodall number (or Cullen 


number of the second kind). 


This page intentionally left blank 


Chapter 8 


Exercises 


In this Chapter we represent some interesting problems concerning 
Mersenne and Fermat numbers, and give (sketches of) their solutions 
(see references to Chapters 2, 3, 4). 


Problems, connected with 
Mersenne numbers 


1. Prove the following linear recurrent relation with constant coef- 
ficients of the second order for the Mersenne numbers: 


Mn+2 = 3Mm+1 = 2M, My = 1, Mo = 3. 


2. Using recurrent relation Mnio = 3Mmi1 — 2Mn, M1 = 1, 
Mz = 3, prove that the generating function for the sequence 
M,, Me, Ms, ..., Mn, ... of Mersenne numbers has the form 

= i : 
f(«) = y=aeaT he. 

1 
—_——____ = My + Mox + Mgx7+--- 
2a? — 32 +1 eae ee 


+ Mmpit” +..., |x| < 0.5. 


3. Using only elementary arguments, prove, that the generating 
function of the sequence M,, M2, Ms3,..., Mn,... of Mersenne 
numbers has the form Cay) and the corresponding series 


is convergent for |x| < 0.5. 
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13. 


14. 
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Find the value of the sum M; + My)-2+ M3. 2? for x = 
1, 2,3, 100, 1000. 


. Prove, that M(x) = ’y<el= iS Inlna, where ¥ is the Euler 


constant. 


. Prove, that if p is a prime, then all Mersenne numbers M, are 


primes or pseudoprimes to the base 2. 


. Prove, that any odd positive integer n divides finitely many 


Mersenne numbers. 


. Prove the infiniteness of primes, using Mersenne numbers. 
. Check, that M,, = —1(mod 8) for n > 3. 
. Prove that M, #4 2? + y?4+ 27, x,y,z € Z, for n> 3. 


. Prove that M, = 272+ y?4+ 224+1#7, 2,y,2,t € Z, forn > 1. 


. Prove, that for any positive integer m < 20 there exists 


a Mersenne number M,, such that the first decimal dig- 
its of M, coincide with the decimal representation of the 
number m. 


Prove, that for any positive integer s, the last s digits of the 
numbers M,,, n = 1,2,..., form an infinite periodical sequence 
with the period, having 4-5°~! elements. 


The Tower of Hanoi (or Tower of Brahma, Lucas’ Tower) is 
a mathematical puzzle. It consists of three rods and a number 
of disks of different sizes, which can slide onto any rod. The 
puzzle starts with the disks in a neat stack in ascending order of 
size on one rod, the smallest at the top, thus making a conical 
shape. The objective of the puzzle is to move the entire stack to 
another rod, obeying the following simple rules: only one disk 
can be moved at a time; each move consists of taking the upper 
disk from one of the stacks and placing it on top of another 
stack or on an empty rod; no larger disk may be placed on top 
of a smaller disk. Check, that with 3 disks, the puzzle can be 
solved in M3 = 7 moves. Prove, that the minimal number of 
moves required to solve a Tower of Hanoi puzzle with n disks 
(and three rods) is M, = 2” — 1. 


15. 


16. 
17. 


18. 


19. 
20. 


21. 


22: 


23. 
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Prove, that the last digit of any Mersenne prime greater 3 is 1 
or 7. 


Prove, that the last digit of any even perfect number is 6 or 8. 


Write the first four perfect numbers 6, 28, 496, 8128 in binary; 
prove, that any even perfect number has in binary the form 
111...111000...002, where after p unities we have p — 1 zeros. 


Find all even numbers less than 1000 of the form x? + 1. Check, 
that the only perfect number of such form is 28. 


Prove, that the number of divisors of a perfect number is even. 


A Pierpont prime of the second kind is a prime number of the 
form 23" —1, u,v > 0. Find first ten Pierpont primes of the sec- 
ond kind. Prove, that any Mersenne prime is a Pierpont prime of 


the second kind. Check, that the largest known Pierpont prime 
is 982589933 —1. 


A Pierpont prime of the second kind 2"3" —1, u,v > 0, with 
v = 0 is of the form 2“ — 1 and is therefore a Mersenne prime 
for u > 2. Prove, that any non-Mersenne Pierpont prime of the 
second kind greater than 3 have the form 6k — 1. 


Consider the numbers of the form k - 2" — 1, with k < 2”. Find 
first ten of such numbers. Find the first ten of primes of such 
form. Prove, that all Mersenne primes have such form. 


Given number N of the form k- 2” — 1, with k < 2”, prove the 
Lucas—Lehmer—Riesel primality test: N is prime if and only if 
it divides Un_2, where a sequence Up, U4, ..., Uj, ...Un—2 is defined 
for alli > 0 by U; = U?_, — 2, and starting point Up depending 
on the value of k. Check the following starting conditions: 


e ifk =1 and n = +1(mod 4) is odd, one can take Up = 4; 
e if k =1 and n = 3(mod 4), one can take Up = 3; 
e if k =3, n =0,3(mod 4), one can take Up = 5778; 


e if k = 1,5(mod 6) and N # O(mod 3), one can take Up = 
(2+ J/3)* + (2 — ¥3)*. 
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24. 


20. 


26. 


27. 


28. 


29. 


30. 


bl. 


32. 
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A sequence p, 2p+1,2(2p+1)+1,... in which all of the numbers 
are primes, is called a Cunningham chain of the first kind. Find 
several Cunningham chains of the first kind. Prove, that every 
term of such a sequence except the last is a Sophie Germain 
prime, and every term except the first is a safe prime. 


A sequence p, 2p — 1, 2(2p—1) —1,... in which all of the numbers 
are primes is called a Cunningham chain of the second kind. Find 
several Cunningham chains of the second kind. 


Prove, that for n > 2 it holds un45 > 10u,, where uy, is the n-th 
Fibonacci number. 


Prove, that for / € N and for any n > 2 we have un+5) > 10! ttn, 
where u,, is the n-th Fibonacci number. 


Prove, that starting with W4 = 63 and Ws = 159, every sixth 
Woodall number W,, = n- 2” — 1 is divisible by 3. 


Prove, that for a positive integer m, the Woodall number Wan 
may be prime only if 2” + m is prime. 


Using the formula Q(b,n) = — b > 2, find first ten Wagstaff 


numbers base b for b = 2, 3, 4, 5, 6, 7, 8. For which specific values 


of b all Q(b,n) (with a possible exception for very small n) are 
composite? 


Check, that Wagstaff numbers base b b > 2, defined as Q(b,n) = 
b” 

oT 
negative base —b. 


can be considered, for odd indexes n, as the repunits with 


Check, that M7 = 127 is a palindromic prime in nonary and 
binary. 


Problems, connected with Fermat 
numbers 


il 


Check, that the numbers v, of the form 2” + 1 can be obtained 
by the recurrence relation Upj41 = 2u;, — 1, vy = 3. 


13. 
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. Prove that the numbers v,, of the form 2” + 1 can be obtained 


by the linear recurrence relation of second order with constant 
coefficients: 


Un+2 = 8Un41 — 2Un, V1 = 3,02 = 5. 


. Using recurrent relation Uj +2 = 3Um41 — 2Un, v1 = 3,v2 = 5, 


prove that the generating function for the sequence v1, v2, U3, -..; 


Un, -. of numbers 2” + 1 has the form f(x) = Ss: Le., 
3 — 4a 2 “ 
=U, + U9e + ugar tee bungie’ +..., |e] < 0.5. 
otsat 3 (ee evo: [e 


. Using only elementary arguments, prove, that the generating 


function of the sequence v1, V2, V3, ..-, Un, --- of numbers 2"+1 has 


3 
the form (—2)(1—22) 


— Say? and the corresponding series is convergent 
for |z| = 0.5. 


. Let g = p™, m > 0, be a power of an odd prime p. Prove, that the 


Fermat number F,, is divisible by q if and only if ord, 2 = 2”*1. 


. Prove, that any divisor d > 1 of a Fermat number F,,, n > 1, is 


of the form k - 2”*+? + 1, where k is a positive integer. 


. Prove, that the set of all quadratic nonresidues of a Fermat prime 


is equal to the set of all its primitive roots. 


. Let the largest prime factor of the Fermat number F;, be P(F;,). 


Check, that P(F,) > 2°+?(4n +9) +1. 


. Check, that in view of the known facts about the factors of F,,, 


Fermat’s question, “whether (2k)? +1 is always a prime except 
when divisible by an F;,,”, is without further particular interest. 


. Prove the infiniteness of primes, using Fermat numbers. 


. Prove the infiniteness of primes in the arithmetic progression 


4k+1,k EN. 


. Given t € N, prove the infiniteness of primes in the arithmetic 


progression 24k +1, k EN. 


Given p € P,t € N, prove the infiniteness of primes in the arith- 
metic progression 2p'k + 1. 
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14. 
15. 
16. 


we 
18. 
19. 


20. 


21. 


22. 
23. 
24. 
20. 
26. 


Zi 


28. 


29. 
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Prove, that for n-th prime number p,, n > 7, it holds p, < Fy_5. 


Prove, that 7(x) > log, log, x + 4 for any x > 17. 


Prove, that every Fermat number F;,, n > 1, has infinitely many 
representations in the form x? — 2y?, where x and y are both 
positive integers. 


Prove, that F,, = p? + q? + z? if and only if n = 2. 


Prove, that F,, =a? +y?+2?+#, 2, y,z,t € Z, for any n > 0. 


Prove, that every Fermat number F,,, n > 0, is of the form 
6m — 1. 


Prove, that any prime of the form n” + 1 is a Fermat prime. 


Find the first digits in the decimal expansion of the sum 
et am = Vind res of the reciprocals of all the Fermat 
numbers. 


Prove, that F73 has more than 24 - 10° digits. 
Check, that Fg < 10/9, but Fy > 101°. 

Prove, that F334 has more than 19100 digits. 
Prove, that Fj945 has more than 24 - 10°°? digits. 


Prove, that the Fermat numbers sit in the Pascal’s triangle 
only in the trivial way: if Fy, = (2) for some n > 2k > 
2, then k=1. 


Prove, that there exist non-trivial solutions of Fi,(a) = ("\, 
where Fy,(a) = a?" +1, a> 1, is a generalized Fermat number. 


Find all regular n-gons, n < 1000, which can be constructed by 
Euclidean methods. 


Gauss proved that we can subdivide a circle into n parts using 
a ruler (an unmarked straightedge) and a compass (which draws 
circles) if and only if n is a power of two times a product of 
distinct Fermat primes. Later Pierpont proved (1895, [Pier95]) 
that we can divide a circle into n parts using origami (paper 


30. 


dl. 


32. 


33. 


34. 


35. 
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folding) if and only if n is a product of a power of two times 
a power of three times a product of distinct primes of the form 
23" +1, u,v > 0. These primes are called Pierpont primes. 

Find the first ten Pierpont primes. Find also, the first ten reg- 
ular polygons, which can be constructible using origami. Prove, 
that any classical constructible polygon can be constructed using 
origami. 


A Pierpont prime 2"3" +1, u,v > 0, with v = 0 is of the form 
2" + 1 and is therefore a Fermat prime for u > 0. Prove, that 
any odd non-Fermat Pierpont prime have the form 6k + 1. 


A Proth number is a number k-2” +1, where & and n are positive 
integers, k is odd, and 2” > k. Find the first ten Proth numbers. 
Prove, that any Fermat number is a Proth number. 


A Proth prime is a Proth number k - 2" +1 (where k and n are 
positive integers, k is odd, and 2” > k), that is prime. Find the 
first ten Proth primes. 


Prove the Proth theorem: if p is a Proth number (i.e., a number 
of the form k- 2" + 1, k is odd, k < 2”), and if there exists an 
integer a for which 


at =-1 (mod p), 
then p is prime. Check, that 5, 13, 17 are primes, using the Proth 
theorem. 


Prove, that for all n > 2 it holds F, +8, F? +8, F3+8 € S; find 
other possible shifts of Fermat numbers, such that for all n > no 
it holds F, + K € S; F2+T¢S,FPF+RES. 


Check, that the third Fermat prime, F) = 17: is the average of 
two consecutive Fibonacci numbers; is the sum of four consecu- 
tive primes; is a prime of the form p?’ + qg?, where p and q are 
primes; has 17 partitions into prime parts; is an integer which is 
not the sum of three distinct primes; is a prime number of the 
form p? + 8; is the smallest prime whose sum of the digits is a 
cubic number; is a prime that is equal to the sum of digits of its 
cube; is the smallest prime that is a quartan, i.e., the sum of two 
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biquadratic numbers; moreover, its square can be expressed as 
the sum of 1, 2,3,4,5,6,7,8 distinct squares. 


Other problems 


Li, 


Given two integer parameters P and Q, the Lucas sequences 
of the first kind U,(P,Q) and of the second kind V,(P,Q) are 
defined by the following recurrence relations: 


Uo(P, Q) = 0, Ui(P,Q) = 1, 
UP O=P +, a8, 0) = 020, 41F, G) torn > |b: 
Vo(P,Q) = 2, Vi(P,Q) = P, 
VP OH Po yee) HO Vict 2.9) for nS 1. 


Check, that the sequence U,,(1, —1) gives the Fibonacci numbers; 
the sequence V,,(1,—1) gives the Lucas numbers. 


. Check, that the sequence U,,(2,—1) gives the Pell numbers; the 


sequence V,,(2,—1) gives the Pell-Lucas numbers. 


. Check that the sequence U,,(3,2) gives the Mersenne numbers 


2” —1; the sequence V,,(3, 2) gives the numbers of the form 2"+1, 
which includes the Fermat numbers. 


. Prove that for n > 0, it holds 


P.- Uni (P, Q) + Vaal Q) 


U, (P,Q) = eee 
Va(P, Q) _ (Pp = 4Q) : HPO) sae ee Vor l Q) 


. Prove, that the terms of Lucas sequences can be expressed as 


n_pn P+,/P?2—4Q 
follows: U, = a , Vn = a" +b", where a = —Y,— 


_ P-./P?=4Q 
b= —*,—. 


, and 


. A Sierpiiski number is an odd natural number & such that &k - 


2” + 1 is composite for all natural numbers n. Check, that all 
odd numbers less 100 are not Sierpinski numbers. 


10. 


Lil 


12. 
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. A Riesel number is an odd natural number k such that k- 2” — 


1 is composite for all natural numbers n. Check, that all odd 
numbers less than 100 are not Riesel numbers. 


. Let p bea prime such that p = 3(mod re Prove, that the Fermat 
Fp-1 


number F, is prime if and only if Mp 7 = —1(mod F,), where 
Mp, is the ae aie Mersenne number. 


. Let p be a prime such that p = 3,5(mod 8). Prove, that the Fer- 


Foti 
mat number F, is prime if and only if Mp, 7? =-—I1(mod Fy4+1), 
where M, is the associated Mersenne number. 


Prove, that every permutable prime (i.e., prime number which 
remains prime on every rearrangement of their decimal digits) 
is a near-repdigit, that is, it is a permutation of the integer 
B, (a,b) = (aaa...aab)19, where a and b are distinct digits from 
the set {1,3,7,9}. Find the first ten permutable primes. Find 
also, the first non-trivial permutable Mersenne prime, and find 
first non-trivial permutable Fermat prime. 


An emirp (prime spelled backwards) is a prime number that 
results in a different prime when its decimal digits are reversed. 
Find the first ten emirps. Find a Mersenne prime, which is an 
emirp. Find a Fermt prime which is an emirp. 


A prime number p is called a Chen prime if p+ 2 is either a 
prime or a product of two primes (a semi-prime). Find the first 
ten Chen primes. Find the first ten Chen primes which are not 
the lower member of a pair of twin primes. Find the smallest 
prime, which is not a Chen prime. 


Solutions: Problems, connected 
with Mersenne numbers 


1. 


In fact, Mni1 = 2M, +1. So, Mp4 = 2My41 +1. Then 
Mn42 = Mn+41 = 2Mm4+1 = 2M, and 
Mn+2 = 3Mmii — 2M. 
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2. In order to obtain the above formula, let us consider two poly- 
nomials 


f(x) =anptayx+---+amnzc™ and g(x) = bo tbix+---+by2” 


with real coefficients and m < n. It follows (see, for example, 
[DeMol10], [Plou92]), that the rational function -— is the gener- 
ating function of the sequence Co, C1, C2, ..., Cn, ---, Which is a solu- 
tion of the linear recurrent equation boCyn+k + b1iente—1 tee + 
bach = 0 of n-th order with coefficients bo, 61, ...,bn- 

In fact, one has the decomposition —— =eotaet+eonr? + 
++ ope" +--+, if|2| <r, andr = mini<i<n |z;|, where 71, ..., Dn 
are the roots of the polynomial g(x). It yields, that the rational 
function —-- is the generating function of the obtained sequence 
CO; C1, C2; -+-yCn,---- Moreover, one gets f(x) = g(x)(co + ce + 
con? +++++¢n2"+---). In other words, it holds 


ag + aye + ayn? +--+ + me™ = (bo + bya t+ bow? +--+ + dpe”) 
x(cg + ere + cu? +--+ + cpa" +--+). 
It is easy to check now the following equalities: 
ago = boco, a1 = boc, + bico, ag = bocg + bic, + bee9, ..., 
Am = boCm +++: + bmeo, 
0 = boem41 +++: + Om41C0;---5 0 = boen +--+ + bnco, 
0 = botn41 +-++ + bnci,...- 


So, the sequence cp, C1, ...,€n,--- is a solution of the linear recur- 
rent equation 


boCntk +++: + bance = 0 


of n-th order with coefficients bo, ...,bn. Moreover, one can find 
the first n elements of this sequence using the first n above equal- 
ities: ag = boco, a1 = boc, + bi, «.., An—1 = pie: bE Cn—1—k- 
On the other hand, let the sequence cg, C1, C2,.-.,€n,--- be a 
solution of a linear recurrent equation bocy+, +--: + bac, = 0 
of n-th order with coefficients bo,...,b,. Let us define numbers 
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do, ++-;@n—1 by the formulas a; = Soo OCi—ks ¢ = 0; 12. 128, 
n—1, using the initial values co, C1, ...,Cn of the given sequence. 
It yields the equality 


2 —1 
ag + ayx + aga” + +++ + Gn_12” 


= (bo + dix + box? +--+ + dn2”) 
X (co + ee + ega? +++ + ene” +...). 


In other words, one gets 


ag + aye + aga” nee SS ie 


bo + bie + boa? + +--+ bya” 


=cotcateor? +..+ene" +... 


So, the generating function of the sequence cg, C1,...,Cn,... has 
f(x) 
the form noe where 


g(x) = bo + bya +--+ +bnx”, and f(x) = ag +--+ +an-12"", 
with ap = boco, a1 = boc, + 610, «--, Gn—1 = boen—1 + b1Cn—2 + 
we + bp—1€0- 

So, the characteristic equation for the recurrence Mnio9 = 
3Mmt1 — 2M, is a? = 32 — 2, ie., «7 —3¢+2 = 0. Then 
the generating function of the sequence My, M2, Ms, ..., Mn, 

. of Mersenne numbers has the form f(z) = —— where 
g(x) = 2x? — 32 +1, and f(x) = ap + a2, where ag = 1-1 =1, 
and a1 = 1-3+(-3)-1 = 0. Thus, f(z) = 1. We obtain 
f2)\= SToT = CE CEE ie., 


il 


———____ = MW, + M. M32? +... M, a 
3g? — Be 1 1+ Mont + Mga" + m41e + 


As min{1,0.5} = 0.5, we get |z| < 0.5. 


. Consider an elementary proof, using the sums of the infinite geo- 
metric progressions: 1 + 2x + (2x)? +--+» = 45 for |22| < 1, 
and 1+a2+2?+4--- = 74 for |2| < 1. So, for |z| < 0.5 it 
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10. 


holds 
M, 4+ Mor+ +--+ Maz” 14+...= (21-1) 4+ (2? -—De 
(2 ag te A ga, 
=—(l+atar?+---ta™*4---)42(1 + 2x + (2x)? +--- 
+ (22)"* +++) 
1 2 1 


“Tat ioe (ado) 


. For example, M, + M2 - 100 + M3 - 100? = 70301; it is easy to 


find the first three Mersenne numbers in this representation. 


. One should use the estimation 2”—1 < x < 2”+!—1; see Chapter 


5, Section 5.1. 


. Let M, = 2? — 1 be a Mersenne number, where p is a prime. 


If M, is a composite, then p is odd. By the Fermat’s little the- 
orem, Mot = 2P-! _ 1 = 0(mod p). So Meo = kp for some 
positive integer k. Hence, My, = 2? — 1|(2*? — 1) = a sk 
It is equivalent to say that 22 = 1(mod M,), which implies 
that 2!@e—! = 1(mod M,). 


. Consider the numbers Mj.g(n). 
. Let gi|Mp,; as ged(My,, Mp;) = 1, then q; # qj; if the set P of 


primes is finite, then P = {q1,...,qx}, but p, = 2, while all q; are 
odd; a contradiction. 


. In fact, for n > 3 it holds 


M, = 2” —-1=0-1=-1(mod 8). 


It is well-known, that numbers of the form 8t + 7 cannot be 
represented as a sum of three perfect squares. In fact, any inte- 
ger a has the form 8¢ +r, where r € {0,+1,+2,+3,4}. Then 
a” = 8k+r, where r € {0,1,4}. Checking all 27 possible combi- 
nations 0+ 0+ 0 = 0(mod 8),0+0+1= 1(mod 8),0+0+4= 
A(mod 8), .... 4+4+4= 4(mod 8), we get, that 2? + y? + 27 = 
81+r, where r € {0,1,2,3,4,5,6}. So, 2? +y? +22 4 81+7. 


11. 


12. 


13. 


14. 
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As M, = 81+ 7 for n > 3, we get that M, 4 «74+ y? + 2? for 
n> 3. 


It is well-known, that any positive integer can be represented as 
a sum of four integer squares (it is the Lagrange’s four-square 
theorem). 


It is true for any positive integer m. It is easy to check for small 
m (see, for example, the table of known Mersenne primes). For 
general proof see, for example, [CFHLZ17]. 


It is easy to check for small s. Thus, for s = 1 it was proven in 
Chapter 3, Section 3.2. 

In general, the period is equal to the multiplicative order of 2 
modulo 5%, which is ¢(5%) = 4.5971. 

For an additional information see, for example, [CFHLZ17]. 


The objective of the puzzle is to move the entire stack to another 
rod, obeying the following simple rules: only one disk can be 
moved at a time; each move consists of taking the upper disk 
from one of the stacks and placing it on top of another stack 
or on an empty rod; no larger disk may be placed on top of a 
smaller disk. 

Check, that with 3 disks, the puzzle can be solved in M3 = 7 
moves. 

Prove, that the minimal number of moves required to solve a 
Tower of Hanoi puzzle with n disks (and three rods) is M, = 
2” — 1. 

A simple solution for the toy puzzle is to alternate moves 
between the smallest piece and a non-smallest piece. When mov- 
ing the smallest piece, always move it to the next position in the 
same direction (to the right if the starting number of pieces is 
even, to the left if the starting number of pieces is odd). If there 
is no tower position in the chosen direction, move the piece to the 
opposite end, but then continue to move in the correct direction. 
For example, if you started with three pieces, you would move 
the smallest piece to the opposite end, then continue in the left 
direction after that. When the turn is to move the non-smallest 
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piece, there is only one legal move. Doing this will complete the 
puzzle in the fewest moves. As a result of the above procedure, 
the number h,, of moves required to solve the puzzle of n disks on 
three rods is given by the recurrence relation h, = 2h,-1+1 with 
hy = 1. Solving gives h, = 2”—1, i.e., the Mersenne number M,. 

For three rods, the proof that the above solution is minimal 
can be achieved using the Lucas correspondence which relates 
Pascal’s triangle to the Hanoi graph. 

While algorithms are known for transferring disks on four rods, 
none has been proved minimal. 


15. In fact, if M, € P, M, > 3, then p € P,p > 2. For any odd prime 
p it holds p = +1(mod 4). If p = 1(mod 4), then p = 4k +1, and 


M,=2? -1=2%*1-1 
Sy 1 S019 61 = Ines 10). 


If p = —1(mod 4), then p = 4k + 3, and 
M22 aia <1 
=o? (0°) Tae" —1]8:6 1 = Toned 1). 


16. It is true for the first perfect number 6. Otherwise, any even 
perfect number has the form 2?~1(2? — 1) with odd prime p. For 


any odd prime p it holds p = +1(mod 4). 
If p = 1(mod 4), then p = 4k + 1, and 


oP-l (op i= oak (gahtl =i) 
= (2*)* . ((2*)* — 1) = 6*- 2-6" — 1) 
= 6(2-6 — 1) = 6(mod 10). 
If p = —1(mod 4), then p = 4k + 3, and 
QP-l (gp t= gtk taygthes =f) 
S(O 0s (2) = ae b= 1) 


ieee 


18. 


19. 


20. 


21. 


22. 


23. 
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See the first perfect numbers 6, 28, 496, 8128, 33550336, 
8589869056, 137438691328, ... (sequence A000396 in the OEIS); 
all of them end with either the digit 6 or the digit 8; but the 
digits do not alternate: 6, 8, 6, 8, 6, 6, 8,..... 


It is obviously: 
oF TOF yo a et) 
= 9k-2 4 92k-3 4 4 ok-1 


In particular, 6 = 1109, 28 = 111002, 496 = 1111100002, 8128 = 
11111110000002. 


It is proven, that the only even perfect number of the form x?+ 1 
is 28 (Makowski, 1962). Moreover, 28 is also the only even perfect 
number that is a sum of two positive cubes of integers (Gallardo, 
2010). 


The number of divisors of a perfect number N (whether even or 
odd) must be even, because N cannot be a perfect square. 


These numbers are 2, 3, 5, 7, 11, 17, 23, 31, 47, 53, ... (sequence 
A005105 in the OEIS). The largest known primes of this type 
are Mersenne primes; currently the largest known is 257589993 — 1, 
The largest known Pierpont prime of the second kind that is not 
a Mersenne prime, is 3-2!189°718 — 1, It was found by PrimeGrid. 


A Pierpont prime of the second kind with v = 0 is of the form 
2” — 1 and is therefore a Mersenne prime. If v is positive, then 
u must also be positive, because a number of the form 3° — 1, 
greater 2, would be even and therefore non-prime. Therefore, the 
odd non-Mersenne Pierpont primes all have the form 6k — 1. 


For k = 1 we obtain Mersenne numbers. So, any Mersenne num- 
ber has the form k- 2” — 1, with k < 2”. 


The Lucas—Lehmer-Riesel test is a particular case of group-order 
primality testing; we demonstrate that some number is prime by 
showing that some group has the order that it would have were 
that number prime, and we do this by finding an element of that 
group of precisely the right order. 
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For Lucas-style tests on a number N, we work in the multi- 
plicative group of a quadratic extension of the integers modulo 
N; if N is prime, the order of this multiplicative group is N? — 1, 
it has a subgroup of order N + 1, and we try to find a generator 
for that subgroup. 

We start off by trying to find a non-iterative expression for 
the U;. Following the model of the Lucas-Lehmer test, put Uj = 
a? + a~?', and by induction we have U; = U? , -2. 

So we can looking at the 2'-th term of the sequence V; = a’ + 
a~’. If a satisfies a quadratic equation, this is a Lucas sequence, 
and has an expression of the form V; = aV;_1; + GVj_2. Really, 
we're looking at the (k - 2')-th term of a different sequence, but 
since decimations (take every k-th term starting with 0) of a 
Lucas sequence are themselves Lucas sequences, we can deal with 
the factor k by picking a different starting point. 

It follows that p; = 2’~'p; + (2'~-!— 1), where p; = p. By setting 
a= BE py, = 2a -1. 

Examples of (complete) Cunningham chains of the first kind 

include these: 


e 2,5, 11, 23, 47 (the next number would be 95, but that is not 
prime); 

e 3, 7 (the next number would be 15, but that is not prime); 

e 29, 59 (the next number would be 119 = 7-17, but that is not 
prime); 

e 41, 83, 167 (the next number would be 335, but that is not 
prime); 


e 89, 179, 359, 719, 1439, 2879 (the next number would be 
5759 = 13- 443, but that is not prime). 


As of 2020, the longest known Cunningham chain of the first kind 
is of length 17, with starting prime 2759832934171386593519, 
discovered by J. Wroblewski in 2008. 

Extending the conjecture that there exist infinitely many 
Sophie Germain primes, it has also been conjectured that 


25. 


26. 


27. 


28. 


29. 
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arbitrarily long Cunningham chains of the first kind exist, 
although infinite chains are known to be impossible. 


It follows that p; = 2‘~!p; — (2*-! — 1), where p; = p. By setting 
a= Po pi =Ja+ 1, 

Examples of (complete) Cunningham chains of the second kind 
include these: 


e 2, 3, 5 (the next number would be 9, but that is not prime); 
e 7, 13 (the next number would be 25, but that is not prime); 


e 19, 37, 73 (the next number would be 145, but that is not 
prime); 


e 31, 61 (the next number would be 121 = 112, but that is not 
prime). 
As of 2020, the longest known Cunningham chain of the sec- 
ond kind is of length 19, with starting prime 79910197721 
667870187016101, discovered by Chermoni and Wroblewski in 
2014. 
It has been conjectured that arbitrarily long Cunningham 
chains of the second kind exist. 


In fact, ifn = 2, then uw7 = 13 > 1—wug = 10. If n > 3, then 
Unt5 = Unt4 t+ Unt3 = 2Un43 t+ Unde = 8Untd2 t+ 2Unqi = 5Unp1 + 
3Un = 8Un + 5Un—1 > 8Un + 4Un—1 = 8Un + 2(Un—1 + Un_1) > 
8Un + 2(Un—1 + Un—2) = 10Un. 

In fact, for / = 1 we obtained this result easily. Going form / to 


L+1, we get: 4unss(41) = Untsn+s > 1l0Un¢s, > 10-10'un = 
104+ p14. 


It is easy to check, that for n = 4,5(mod 6) it holds the W, 
O(mod 3). For example, if n = 5(mod 6), then 


W, =o OPP a1 a7) «1 (1) = 1 Ona 9), 


Thus, in order for W,, = n-2”—1 to be prime, the index n cannot 
be congruent to 4 or 5 modulo 6. 


In fact, Wom = 2™. 2?" —1 = 242" _ 1 = Miso. 
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30. 


dl. 


32. 


As of 2020, the only known primes that are both Woodall 
primes and Mersenne primes are W2 = M3 =7, and W512 = Ms91. 


For some specific values of b, all Q(b, n) (with a possible exception 
for very small n) are composite because of an algebraic factor- 
ization. Specifically, if b has the form of a perfect power with 
odd exponent (like 8, 27, 32, 64, 125, 128, 216, 243, 343, 512, 
729, 1000, ... (sequence A070265 in the OEIS)), then the fact 
that x” +1, m odd, is divisible by x + 1 shows that Q(a™,n) is 
divisible by a” + 1 in these special cases. 

Another case is b = 4k*, with k positive integer (like 4, 64, 324, 
1024, 2500, 5184, ... (sequence A141046 in the OEIS)), where we 
have the aurifeuillean factorization. 

However, when } does not admit an algebraic factorization, it 
is conjectured that an infinite number of n values make Q(b, 7) 
prime (all such n should be odd primes). 

For b = 10, the primes themselves have the following appear- 
ance: 


9091, 909091, 909090909090909091, 


909090909090909090909090909091, ... 
(sequence A097209 in the OEIS); these n are 5, 7, 19, 31, 53, 
67, 293, 641, 2137, 3011, 268207, ... (sequence A001562 in the 
OEIS). 


It is easy to see, that, for odd n, it holds oo = a = 


R,(—b). So, the Wagstaff primes base b, b > 2, are can be con- 
sidered, for odd n, as generalized repunits with the negative base 
—b. In particular, the generalized Wagstaff primes base b are 
generalized repunit primes base —b. Smallest base 6 such that 
R,(—b) is prime (where p is the n-th prime), are 3, 2, 2, 2, 2, 2, 
2, 2, 2, 7, ... (sequence A103795 in the OEIS). 

Smallest prime p > 2 such that R,(—0) is prime are (start with 
b= 2, 0 if no such p exists), are 3, 3, 3,5, 3, 3, 0,3, 5, By 
(sequence A084742 in the OEIS). 


In binary, 127 = 11111119; In nonary, 127 = 1519. 
Moreover, if is a Friedman number in base 10, since 127 = 
2’ — 1, as well as in binary, since 1111111 = (1+ 1)44 —- 1. 
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Solutions: Problems, connected 
with Fermat numbers 
1. In fact, 2-(2" +1) -1= (24142) -1=2"*'4+1. 
2. In fact, Uni = 2Un — 1, Unzo = 2Un41 —1. Then vps — Un4i = 
2Um+1 — 2Un, and Up+2 = 38Um41 — 2Un. 


3. In order to obtain the above formula, let us consider two poly- 
nomials 


f(v) =aop+a1%+-+-+amz™ and g(x) = bo +bie+---+bn2” 


with real coefficients and m < n. It follows (see, for example, 
[DeMo10], [Plou92]), that the rational function — is the gener- 
ating function of the sequence Co, C1, C2, ..., Cn, ---, Which is a solu- 
tion of the linear recurrent equation boCn+k + b1entR—1 tee + 
byc, = 0 of n-th order with coefficients bo, by, ..., bn. 
In fact, one has the decomposition ao =otaqrt+eor?t+ 
--+en2" +... if |z| <r, and r = mini<i<n |xi|, where 21,...,2n 
are the roots of the polynomial g(x). It yields, that the rational 
function —— is the generating function of the obtained sequence 
CO, C1; C2;+++;Cn;---- Moreover, one gets f(x) = g(x)(co + ca + 
con® +... + eye oss ). In other words, it holds 


ag + aya + agu* +++» +am2™ = (bo + bie + box? +--+ + by”) 
x (co + eye + cg? +... tena” +--+). 


It is easy to check now the following equalities: 


ao = boco, a1 = boc + b1C9, G2 = boce + bic, + bac, ..., 
Am = bo¢m +--+: + bmeo, 
0 = bo¢m41 +++ + bm41C0,---5 0 = bocn +--+ + bnco, 
0 = bo¢ng41 +++: + baci, ...- 
So, the sequence cp, C1, ...,Cn,--- is a solution of the linear recur- 


rent equation boCn+K +--+: + bac, = 0 of n-th order with coef- 
ficients bo,...,b,. Moreover, one can find the first n elements 
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of this sequence using the first n above equalities: ag = bgco, 
ay = boc + bico, «+; On—1 = Diag ObCn—1-k- 

On the other hand, let the sequence co, C1, C2,...,€n,--- be a 
solution of a linear recurrent equation boCntp +°:: + bac, = 0 
of n-th order with coefficients bo,...,b,. Let us define numbers 
do, -+-;@n—1 by the formulas a; = oe beci_-k, 1 = 0,1,2,...,.n — 
1, using the initial values co,c1,...,Cn of the given sequence. It 
yields the equality 


1 


ag + a,x + agv* +++ + apr" 
= (bp + bye + boa” +--+ + nx”) 
x (cp tye + cg? +... tent” +---). 


In other words, one gets 


ag + ay2 + agx® +---+a,_12"-! 


bo + bya + boa? + +++ + dpa” 


=egtee ten? +..+e,a"+.--. 


So, the generating function of the sequence cg, C1,...,Cn,... has 
f(x) 
the form Oe where 


g(x) = bo +byo+-+++bnz”, and f(x) =ag+-+-+an-12"", 
with ap = boco, a1 = boc + 6100, «--, Gn—1 = boen—1 + b1Cn—2 + 
pdr + bn—1C0- 

So, the characteristic equation for the recurrence up ig = 
3Um+1 — 2, is x? = 3a — 2, ie., x? — 32 +2 = 0. Then the 
generating function f(x) = — where g(x) = 2x? — 3x +1, and 
f(x) = an+a12, where ap = 1-3 = 3, and a; = 1-5+(—3)-3 = —4. 
So, f(a) = 3— 4a. We obtain f(x) = aot = CST CHEE 
Le., 

3 — 4a 
2x2 —32+1 


As min{1,0.5} = 0.5, we get |z| < 0.5. 


= vy tor + uga7 +--+ Unga +--. 


4. One can obtain an elementary proof of this fact, using the sums 
of infinite geometric progressions. 


10. 
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. Let q|Fy. Then q|(22” + 1) - (22"-1) = 22"""-1, and, hence, 


gntl 


Q = 1(mod q). It follows that ord, 2|2"*1, ie. 27+ = 
k - ord, 2 for some positive integer k. Thus, k is a power of 2 
and so is ord, 2. Let e = ordy2 = 2). If 7 <n+1, then we have 
q\(2°?" ’-1) = 2?"-1. But this is impossible because q|(2?” + 1), 
and q #2. Hence, j =n +1 and so ord, 2 = 2""1. 

Conversely, if we assume that ord,2 = 2”*1, then q|( 
1) = (2?" + 1) - (22" — 1). Since q is an odd prime, q divides 
either 2?" + 1 or 22” — 1. But q cannot divide 2?” — 1 because 
2” < ord,2. Hence, g|(2”" +1), ie., q|Fn. 


genet 


. Consider the product (k-2”+? +1)(t-2™+? +1). Without loss of 


generality, assume m > n. Then (k-2"+?+1)(t-2+?+1) =k-t- 
gmtnt4 1 fp,gnt24¢,.9m+2 44 = (k-t-2742 4 h+e.Q27-7).9rt2 47, 
which is also in the form of k- 2"+? +1. So, all divisors d > 1 of 
a Fermat number F;,, n > 1, have the form k- 2"+? + 1. 


. First let a@ be a quadratic non-residue of the Fermat prime Ff, 


and let e = ordp, a. According to the Fermat’s little theorem, 
a®n-! = 1(mod F,), so e|(F, — 1) = 22”. It follows that e = 2* 
for some non-negative integer & < 2”. On the other hand, by the 
Euler’s criterion, a = —1(mod F,,). Hence, if k < 2”, then 
2k 92" and so 22""' = 1(mod Fy), which is a contradiction. 
So, k = 2", ie, ordp,a = 2”. Therefore, a is a primitive root 
modulo Fy. 

Conversely, suppose that g is a primitive root modulo F),. It 
follows that g # 1(mod F,,), and by, the Euler’s criterion, g 
cannot be a quadratic residue. 


. It is easy to check for small values of n (see, for example, Chapter 


4, Section 4.1.) 
In general, it was proven by Grytczuk, Luca and Wéjtowicz in 
2001. 


. See the paper Fermat numbers Fy, = 2?" +1 of R.D. Carmichael, 


1919, [Carm19]. 


Let dn be the least prime divisor of F;,. As gcd(Fi,, Fy) = 1 for 
n #m, then qd, # dm, and we obtain infinitely many primes 
q0; q1; aay dk; et 
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11. 


12. 


13. 


14. 


15. 


16. 


17. 
18. 
19. 


20. 


Note, that any prime divisor of F,,, n > 1, has the form 4k + 1, 
and use the well-known property: gcd(Fi,, F,) = 1 for n £m. 


For t = 2 it is obviously. For t = 2 it was proven above. Let 
t > 2. In this case consider the numbers F;, F441, ..., Fi47,... Each 
such number F;,;, | > 0, has a prime divisor of the form k - 
gre + y= 6-241. 


If p = 2, the situation is trivial; see that problem above. For 
p€ P, p> 2, see, for example, [Step01]. 


Let qn be the smallest prime divisor of F,. Then gg = 3 = po, 


qi = 5 = pz, q2 = 17 = pz, and we obtain, that py < dn_5 < Fr—s 
for all n > 7. 


Let x > 17, and ze [Pr Pn+1)- Then 7(xz) = ™(Pn) = 9, > 7, 
Moreover, 2 < pn41 < 2%” +1, ie. 2 < 2?” , or log, log, x < 
n —4. Now we obtain, that a(x =n > log, ioe g+A., 


First, (Zo, yo) = (Fn—1, Fn—2-1) gives one such representation. 
Now notice that 


(3a + 4y)? — 2(2x + 3y)? 
= 9x? + 2dary + 16y? — 8x? — 24xy — 18y” = x? — Qy?. 


If x and y are both positive, then 32 + 4y > a and 2+ 3y > y 
are also positive. This means that we can find (2;, y;) recursively 
by setting (x;, y;) = (3aj;-1 + 4yi-1, 24;-1 + 3y;_-1). The set of all 
points (%m,Ym) we find will be infinite, and each point will give 
a representation for F;, in the desired form. 


See Chapter 4, Section 4.2. 
It is true due to the Lagrange four-square theorem. 


It is equivalent to show that F, + 1 is divisible by 6. In fact, we 
have F, +1 = (8F,--F, + 2) +1 = 3(f,-...- F, +1), where 
F,-...- F, +1 is an even number. 


Ifn"+1 is prime, there exists an integer m such that the exponent 
n has the form n = 2?". The equation n”+1 = F(2™+m) holds 
in that case. 


Pall 


22. 


23. 


24. 


25. 
26. 


27. 


28. 
29. 


30. 


dl. 


32. 


Exercises 289 


In fact, >) ,>0 a = indo FT aaa = 0,59606... . More exactly, 
the decimal expansion of es Pega 3 is given by the sequence 
5, 9,6,0,6,3,1,7,2,1,... (sequence A051158 in the OEIS). It is 
known, that >7,,s0 TEES is irrational. (Solomon and Golomb, 
1963). 


In fact, 219 = 1024 > 103, 22° +1 > 22% > (28(2!))7 > 98107 — 
980-1070 = (210)8-10%° = 1924-1070. 


So, Fo is the first Fermat number with more that 100 digits, i-e., 
the first Fermat prime, greater than googol. 


So, F334 is a Fermat number with more that 10! digits (in fact, 
the first such Fermat number), i.e., the first Fermat number, 
greater than googoplez. 


It can be proven using similar reasons. 


See [Luca01]. 
This fact can be illustrated by the example F}(3) = (3) 


For 11 < n < 1000, there exist 54 such numbers. 


The first few Pierpont primes are 2, 3, 5, 7, 13, 17, 19, 37, 73, 
97, ... (sequence A005109 in the OEIS). As any Fermat prime is 
a Pierpont prime (with v = 0, u = 2”), then any constructible 
polygon can be constructed using origami. 


A Pierpont prime with v = 0 is of the form 2“ + 1, If u = 0, we 
obtain 2, if u > 0, we obtain a Fermat prime. If v is positive then 
u must also be positive, because a number of the form 3v + 1 
would be even and therefore non-prime. Therefore, the odd non- 
Fermat Pierpont primes all have the form 6k + 1. 


The first ten Proth numbers are 3, 5, 9, 13, 17, 25, 33, 41, 
49, 57, ... (sequence A080075 in the OEIS). Without the con- 
dition that 2” > k, all odd integers larger than 1 would be Proth 
numbers. 


The first ten Proth primes are 3, 5, 13, 17, 41, 97, 118, 193, 241, 
257, ... (sequence A080076 in the OEIS). 
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33. 


34. 


35. 


The proof of this theorem uses the Pocklington-Lehmer primality 
test, and closely resembles the proof of Pépin’s test (see, for 
example, [Ribe89], [Ribe96]). 

For example, for p = 3 = 1-2! + 1, we have that or +1=83 
is divisible by 3, so 3 is prime. ; 

For p=5 =1-2? +1, we have that 35 +1 = 10 is divisible 
by 5, so 5 is prime. 

For p = 13 = 3-2? +1, we have that 5-2 +1 = 15626 is 
divisible by 18, so 13 is prime. 

For p = 9, which is not prime, there is no a such that a9~!? +1 
is divisible by 9. 


Note, for example, that for all n > 1, it holds 22" +1 = 2(mod 3); 
for all n > 2, it holds 22" + 1 = 2(mod 5), ete. 


See Chapter 6, Zoo of Numbers. 


Solutions: Other problems 


1 


It follows by definition of the Fibonacci sequence: the recurrence 
has the form un = 1+ Un—1 + (—1)- Un—2, and up = wy = 1. 
As for the Lucas sequence, the recurrence is the same, while 
Lo = 2,1, = 1. 


. It follows by definition of the Pell sequence: the recurrence has 


the form P, = 2- P,-1 + (—1)- Py-2, and Py = 0,P, = 1. As 
for the Pell-Lucas sequence, the recurrence is the same, while 
PLo = 2, PL, = 2. 


. We checked this fact before. In fact, we have shown, that a 


common recurrence for the numbers of the form 2” + 1 is 
Unt2 = 3Un+41 + 2Un, while the starting values are 29_1=0, 
Pape ee paH9 = s, 


. It follows from the definitions. 


. The characteristic equation of the recurrence relation for Lucas 


sequences U,(P,Q) and V,(P,Q) is: x2 — Pr + Q = 0. It has 
the discriminant D = P? — 4Q and the roots a = PtyD and 
b= PvP Thus: a+b= P, ab = 1(P?- D)=Q, a—b= VD. 
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Note that the sequence a” and the sequence 6” also satisfy the 
given recurrence relation. However these might not be integer 
sequences. 

When D ¥ 0, a and 0 are distinct and one quickly verifies 
that a” = VatUnvD. —— Va=UnvD It follows that the terms of 
Lucas sequences can be expressed in terms of a and 6 as follows 

nm nr nm Tm 
i= “— = — Vz =a" +0". 
The case D = 0 occurs exactly when P = 25 and Q = S? for 
some integer S, so that a = b = S. In this case one easily finds 
thet U.P.) = 28,6") =ne |, Vale,@) = 25.5) = 
2S”. 


. In fact, for k = 1 we get the numbers 2” + 1; we know exactly 
five primes of such form; they are Fermat primes. For k = 3 
we get a prime on the first step: 3-2'+ 1 = 7, etc. In 1960, 
W. Sierpinski proved that there are infinitely many odd integers 
k such that k-2"+ 1 is composite for all natural numbers n (see 
Chapter 4, Section 4.3). 

The sequence of currently known Sierpiiski numbers begins 
with 78557, 271129, 271577, ... (sequence A076336 in the OEIS). 
It is unknown, if 78557 is the smallest Sierpiiski number. 


. In fact, for k = 1 we get the numbers 2” — 1; we know exactly 
51 primes of such form; they are Mersenne primes. For k = 3 we 
get a prime on the first step: 3-2'—1—=5, etc. 

In 1956, H. Riesel showed that there are an infinite number 
of integers k such that &-2” — 1 is not prime for any integer n. 
He showed that the number 509203 has this property, as does 
509203 plus any positive integer multiple of 11184810. 

The sequence of currently known Riesel numbers begins with: 
509203, 762701, 777149, 790841, 992077, 1106681, 1247173, 
1254341, 1330207, ... (sequence A101036 in the OEIS). 

The Riesel problem consists in determining the smallest Riesel 
number. 


. It suffices to show that Jacobi symbol (=) = —l. We have 
27-2 = 1(mod M,), and multiplying 2 to both sides we get 
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10. 


Ll; 


12. 


. It sufficies to show that Jacobi symbol ( 
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27-1 = 2(mod M,). This implies that F, = 2-2"-'+1= 
5(mod M,). 
Moreover, since p = 3(mod 4), Mp = 2?-1 = 


8-24* _1 = 3-1-1 = 2(mod 5). Thus, (=) (<2) (a7) 


(== 


Mp \ _ 
Fe) =—L 


We can show that F, = 5(mod M,). Then Fy41 = (fF, —1)? + 
1 = 4%+1=17(mod M,). 

First we assume p = 3(mod 8), then M, = 2°*t3 —-1 = 8- 

M, F 

—1=8-1=7(mod 17). Hence, (7%) = (4+) = (ap) = 
(34) = ) = F) = @) =-(@) =-G@) =-1 

Now if we assume p = 5(mod 8), then M, 1 

M, M, = = 

2° — 1 = —3(mod 17). Hence, (74) (+4) (+2) (V4 

(i) = (3) = G) =-1. 


See, for example 337. It is a permutable prime because each of 


— 98k+5 _ 


337, 373 and 733 is prime. The first few permutable primes are 2, 
3, 5, 7, 11, 13, 17, 31, 37, 71, 73, 79, 97, 113, 131, 199, 311, 337, 
373, 733, 919, 991, Rig = 1111111111111111111, ... (sequence 
A003459 in the OEIS). 


The sequence of emirps begins from 13, 17, 31, 37, 71, 73, 79, 
97, 107, 113, ... (sequence A006567 in the OEIS). So, the first 
mersenne emirp is Ms; = 31, while the first Fermat emirp is 
Fy = 17. 

As of 2020, the largest known emirp is 1012°°6 + 941992101 - 
104999 + 1, found by J. K. Andersen in 2007. 


The Chen primes are named after Chen Jingrun, who proved 
in 1966 that there are infinitely many such primes. This result 
would also follow from the truth of the twin prime conjecture as 
the lower member of a pair of twin primes is by definition a Chen 
prime. 

The Chen’s theorem states that every sufficiently large even 
number can be written as the sum of either two primes, or a 
prime and a semi-prime. The Chen’s theorem is a giant step 
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towards the Goldbach’s conjecture, and a remarkable result of 
the sieve methods. 

The first few Chen primes are 2, 3, 5, 7, 11, 13, 17, 19, 23, 29, 

. (sequence A109611 in the OEIS). 

The first few Chen primes that are not the lower member of 
a pair of twin primes are 2, 7, 13, 19, 23, 31, 37, 47, 53, 67, ... 
(sequence A063637 in the OEIS). 

The first few non-Chen primes are 43, 61, 73, 79, 97, 103, 151, 
163, 173, 193, ... (sequence A102540 in the OEIS). 
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